Legal
Cookie Policy
Cookies + local-storage keys we set, why, and for how long. You pick which categories fire — the choice sticks in this browser + you can change it any time via the banner or by clearing this site's storage.
Retention periods + legal-basis mapping still need EU counsel review.
1. What we set + why
Every entry below is in one of three categories:
- Strictly necessary — the app doesn't work without them; the banner does not gate these.
- Analytics — aggregate usage insights. Off by default; enabled only when you accept.
- Preferences — remember choices (theme, currency, saved filters). Off by default; enabled only when you accept.
2. Strictly necessary
| Name | Set by | Purpose | Retention |
|---|---|---|---|
| territorium_session | Backend (Laravel) | Sign-in session, HttpOnly, Secure, SameSite=Lax | 2 hours idle / 24h absolute |
| XSRF-TOKEN | Backend (Laravel) | CSRF protection for form + XHR submissions | Session |
| territorium_cookie_prefs | Frontend | Remember your consent choice | 180 days |
| NEXT_LOCALE | Frontend (next-intl) | Remember the language you picked | 1 year |
| __cf_bm | Cloudflare | Bot management (blocks abusive automated traffic) | 30 minutes |
3. Analytics (opt-in)
| Name | Set by | Purpose | Retention |
|---|---|---|---|
| (no cookies) | Plausible | Aggregate page views + referrer. Cookieless. | n/a |
| ph_*_posthog | PostHog | Product-usage events; a distinct-id keeps repeated sessions from being double-counted. | 1 year |
4. Preferences (opt-in)
| Key | Storage | Purpose | Retention |
|---|---|---|---|
| theme | localStorage | Light / dark preference (next-themes) | Until cleared |
| territorium.compare | localStorage | Units you've added to /compare | Until cleared |
| territorium.pwa.install.dismissed_at | localStorage | Silence the install prompt for 14 days after dismissal | 14 days |
| territorium.cookie_prefs.v1 | localStorage | Full consent-choice payload (shape-compatible with the cookie) | Until cleared |
5. How to change your mind
Open the cookie banner again by clearing your territorium_cookie_prefs cookie (browser Settings → Site Data → territorium.eu), or use your browser's private/incognito mode to browse without persistence. We're adding an in-app "Cookie preferences" link to the footer next iter; until then, the browser-level reset is the workaround.
6. What we do not do
- We don't set advertising cookies. We don't run ad networks.
- We don't fingerprint your browser to bypass consent.
- We don't sync analytics identifiers across sites.
Territorium Inmobiliario S.L. · CIF B90123456 · Barcelona, Spain · privacy@territorium.eu
Last updated: 1 August 2026 · Version 1.0-draft