Cookie policy
What we store in your browser, what for, how long it lasts and how you change it. No small print.
Policy version: 2026-09-12
This text is a working draft: it describes how the system actually behaves, but it is no substitute for review by a professional. It will be reviewed and signed off before commercial launch.
What a cookie is
A small file the site stores in your browser. Some are essential (remembering you’re signed in); others are optional. We also say “cookie” here for anything stored by equivalent technologies, such as your browser’s local storage: what matters is that something stays on your device, not what it’s called under the hood.
Who sets them
They are set by the owner of this service, who is also answerable for them. Full identifying details will be published with the legal review, alongside those in the legal notice. For anything about cookies or data, write to us from the contact page.
On what basis
Necessary cookies don’t need your permission: without them we can’t provide the service you asked for (art. 22.2 LSSI). Everything else is installed only with your consent (art. 6.1.a GDPR), which you give by ticking what you want and can withdraw whenever you like, as easily as you gave it.
- Necessary They keep your session, remember your language and protect forms. The site doesn’t work without them, so they can’t be turned off.
- Preferences They remember how you like to see things: saved views, columns, filters.
- Analytics They tell us which pages get used and where people get stuck, in aggregate. We never sell this data or link it to your account.
Exactly what we store
This table isn’t hand-written: it comes from the same inventory the code uses to set and clear cookies. If the product set a cookie tomorrow that wasn’t listed here, the automated tests wouldn’t let it ship.
| Name | Category | What it’s for | Lifetime |
|---|---|---|---|
| satsm_consent | Necessary | Stores which categories you accepted and under which policy version. | 180 days |
| satsm_visitor | Necessary | Random identifier so we can remember your cookie choice and prove we asked. It doesn’t say who you are. | 180 days |
| satsm_locale | Necessary | Remembers the language you chose in the menu. Written the moment you choose it. | One year |
| satsm_platform | Necessary | Keeps your session on the site, sign-up and sign-in. It is deleted when you close the browser, unless you tick “Keep me signed in on this device”: then it lasts up to 30 days. | 30 days |
| satsm_acceso | Necessary | Keeps the sign-in screen on your shop’s own domain alive while you type your password and code. | For the session |
| satsm_console | Necessary | Keeps the session for the platform’s internal console. | For the session |
| satsm_td | Necessary | Remembers that you already verified this browser with the second factor, so we don’t ask for a code every time. | 30 days |
| satsm_hb | Necessary | A random number for this browser that ties sign-in links to whoever asked for them: without it, a forwarded link could put someone else into another person’s account. It is deleted when you close the browser. | For the session |
| satsm_anchor | Necessary | Marks your sign-in on this browser so that “Sign out”, wherever you press it, closes the site and all your shops at once. It opens nothing by itself: it is a signed number. It is deleted when you sign out. | 30 days |
| satsm_known | Necessary | Remembers that you have signed in successfully from this browser, so nobody can lock you out on purpose by trying wrong passwords with your email. It opens nothing and does not skip the code: it holds signatures, not your name or email. | 90 days |
Inside your ERP
Once you’re inside your company’s ERP there are these cookies as well. They’re all technical: without them you can’t work.
| Name | Category | What it’s for | Lifetime |
|---|---|---|---|
| satsm_<empresa> | Necessary | Keeps your session inside your company’s ERP. It carries your company’s name so two tabs from two companies don’t clash. | 30 days |
| remember_token | Necessary | Only if you tick “keep me signed in”: saves signing in every day. | 30 days |
| trusted_device_token | Necessary | Remembers that this device already passed the ERP’s second factor. | 30 days |
Third parties
We load no third-party cookies or advertising trackers, before or after your consent: none of the cookies in the table belongs to another company. If any were ever added, this page would be updated, its version would change, and you’d be asked again before it loaded.
Outside Europe
None of these cookies sends information outside the European Economic Area. The service’s servers are in the European Union.
How long they last and what happens next
Each cookie expires on its own within the period shown in the table. Your decision is kept for six months: after that we ask again, and sooner if we change this policy. The record of your consent stays on our server for as long as it’s needed to prove it, tied to a random identifier and never to your name.
Your rights
You can withdraw your consent whenever you like from your preferences, and delete cookies from your own browser. For any personal data we process you can also exercise your rights of access, rectification, erasure, objection, restriction and portability, and complain to the Spanish Data Protection Agency if you feel we haven’t dealt with you properly.
Changing your mind
You can open your preferences at any time from the link in the footer, on any page of the site. No need to write to us or delete anything by hand.
Every substantive change raises the version, and raising the version means we ask you again: consent given for an old policy doesn’t hold for a new one.