Cookie Policy

Last updated: November 2026

1. What are cookies?

A cookie is a small text file that a website saves on your computer, tablet or mobile phone when you visit it. It allows the website to remember your actions and preferences for a period of time. This policy also covers the browser's local storage (localStorage), which works in a similar way.

2. Types of cookies we use

This website uses two types of cookies:

  • Technical (strictly necessary): they are essential for the website to work and remember your language, your cookie choice and other interface preferences, such as having closed a notice. They do not require consent.
  • Analytical: they allow us to measure how the website is used with Google Analytics. They are only activated if you accept them.

Apart from the Booksy calendar, explained in section 5, this website does not use advertising, personalisation or social media cookies. The links to Instagram and TikTok do not set cookies on this website. The booking calendar and the payment are third-party services, described in section 5.

3. Technical cookies and local storage

These belong to this website:

  • NEXT_LOCALE (cookie): remembers your language. It lasts for the browser session.
  • guinda_cookie_consent (cookie): stores your cookie choice and the version of the privacy policy in force when you made it. It lasts 180 days.
  • admin-token (cookie): identifies authorised staff in the admin panel. It is not used with visitors. It lasts 24 hours.
  • cookie-consent, cookie-preferences and cookie-consent-meta (localStorage): store your choice, the selected categories, the version of the text and the date. They are discarded after 24 months, as explained in section 6, even if the cookie above expires sooner.
  • bono-del-mes-dismissed:* (localStorage): remembers that you closed the voucher-of-the-month notice, so that it does not reappear for 24 hours. It stays in your browser until you delete your data.

4. Analytical cookies: Google Analytics

If you accept them, we use Google Analytics 4 to find out which pages are visited and how many people tap "Book" or WhatsApp. These cookies assign an identifier to your browser, so the information is not anonymous. Payment pages are not measured.

  • _ga (cookie on guindaspa.com, managed by Google): distinguishes users. It lasts 2 years.
  • _ga_* (cookie on guindaspa.com, managed by Google): keeps the session state. It lasts 2 years.

That is Google's default lifetime. Browsers may shorten it: according to Google, to 400 days in Chrome and 7 days in Safari if you do not return to the website.

The gtag.js script is downloaded from www.googletagmanager.com, but this website does not use a Google Tag Manager container or marketing tags. Before you accept, that script is not loaded and nothing is sent to Google. See what data Google receives, how long it is kept and the transfers to the United States in the Privacy Policy.

5. Third-party services

Booksy (booking calendar). It is only loaded on the booking page, inside a frame served by Booksy (Booksy Iberia, S.L.U.). It loads when you open that page because the calendar is the very service you request by visiting it, and it is not loaded on the rest of the site. Your choice in our cookie banner does not apply to the calendar: Booksy manages its consent with its own tool (Cookiebot). In our measurement of 2 November 2026, without accepting anything, we observed the following:

  • Cookies set: __cf_bm (hcaptcha.com, about 30 minutes), Cloudflare anti-bot security, and m (m.stripe.com, 400 days), Stripe anti-fraud.
  • Other providers contacted: hCaptcha, Stripe, Feroot, Cookiebot, Eppo (experiments) and CloudFront (images). The frame also loads Booksy's Google Tag Manager container.
  • Cookieless measurements: the frame sends Google cookieless measurements, including a call to the advertising domain pagead2.googlesyndication.com. Those that state a consent status mark it as denied and request non-personalised advertising. Google receives technical data such as your IP address, browser, the page visited and calendar usage events.
  • Booksy banner: the calendar showed no cookie banner, not even when opening a service. Cookiebot left optional cookies as rejected and no analytics or advertising cookies were set.

According to our August 2026 measurement, on accepting the Booksy banner, Booksy and its providers set analytics and advertising cookies, including those of Google Analytics, TikTok and Hotjar.

Booksy may change these tools. More info: Booksy privacy policy.

Stripe (gift voucher payment). Payment takes place on Stripe's page, outside this website, which does not load Stripe scripts. The Stripe cookie policy applies there.

Sentry (technical errors). We use Sentry to detect errors and measure website performance. It does not set cookies or record sessions.

6. Your consent

  • Choosing: when you arrive you can accept, reject or configure analytical cookies. If you reject them, the website works the same.
  • Changing your mind: you can change your choice at any time under "Cookie preferences" in the page footer.
  • Renewal: your choice, whether to accept or reject, is kept for 24 months. After that we ask you again. If what we tell you about cookies changes, we ask again anyone who accepted them.
  • Withdrawal: if you withdraw consent or it expires, we stop measuring and delete _ga and _ga_* from your browser. This does not affect data already sent to Google, which is kept as stated in the Privacy Policy.
  • Booksy: "Cookie preferences" does not change anything you accept with Booksy, which you must manage with Booksy.

You can also install the Google Analytics opt-out browser add-on.

7. Managing cookies in your browser

You can also block or delete cookies from your browser. If you block technical cookies, some features may stop working:

8. Updates

Emma Rodríguez Espinosa may amend this Cookie Policy to meet legal requirements, to reflect changes in the services used by the website, or to follow the instructions of the Spanish Data Protection Agency.