Cookie Policy
Last updated: November 3, 2026
This Cookie Policy explains what cookies are, which ones dalvoxcapital.com uses, what they are for, and how you can accept, reject, or delete them. It is provided in compliance with Article 22.2 of Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE) and supplements our Privacy Policy, of which it forms part for all purposes. The controller of this site is Dalvox Global Systems, S.L.U.
1. What cookies are
A cookie is a small file that a website stores in your browser when you visit it and can retrieve on later visits. Alongside cookies, equivalent technologies are used, such as the browser's local storage, which work in a similar way. They serve very different purposes: remembering a preference of yours, keeping a session open, or measuring how the site is used. That is why the law does not treat them all alike: what determines whether your permission is required is not the file itself, but the purpose for which it is used.
2. First-party and third-party cookies
First-party cookies are those set by dalvoxcapital.com itself, and third-party cookies are those set by another company through our site. This site uses both types: the cookies necessary for the website to function are first-party; the audience-measurement cookies are set by Google Ireland Limited through Google Analytics; and, only on the payment page, the payment form of our payment provider (Stripe), which we embed in that page, and its payment and anti-fraud partners set the cookies strictly necessary to collect the payment securely. We do not use advertising, profiling, or social-media cookies.
3. Cookies we use
| Type | Name | First- or third-party | Purpose | Duration |
|---|---|---|---|---|
| Necessary (local storage) | dvx-theme |
First-party | Remembers your light or dark theme preference. It contains no identifier and is never transmitted to our servers. | Until you clear your browser data |
| Necessary (local storage) | dvx-consent |
First-party | Remembers your decision about cookies — accepted or rejected — and the date you made it, so you are not asked again on every visit. It also contains a random identifier, created by your browser, which is sent to our server with each decision so that we can demonstrate it (see Section 4). | 24 months |
| Necessary | dvx_cliente |
First-party | Keeps your customer dashboard session open after you sign in with the code or link we send you by email. It is set only if you sign in, it cannot be read by any script on the page, and it is only sent over a secure connection (HTTPS). | Ends after 2 hours of inactivity and, in any event, after 7 days, or when you sign out |
| Necessary (payment page only) | __stripe_mid, __stripe_sid (on our domain) and m (on m.stripe.com) |
Third-party — Stripe | Fraud prevention and security in the payment: they help Stripe tell real buyers from fraudulent ones and from bots. Stripe does not use them for advertising. Stripe also keeps temporary data in your browser’s session storage, which is deleted when you close the tab. | __stripe_sid: 30 minutes; __stripe_mid: 1 year; m: up to 2 years |
| Necessary (payment page only) | hmt_id |
Third-party — hCaptcha (Intuition Machines, Inc.) | Distinguishes people from automated access on the payment form. | 30 days |
| Necessary (payment page only) | __cf_bm, __cflb |
Third-party — Cloudflare, Inc., on behalf of hCaptcha | Bot protection and load balancing for the hCaptcha service used by the payment form. | 30 minutes |
| Necessary (payment page only) | cf_clearance |
First-party (set by Cloudflare, Inc., which protects our website) | Remembers that your browser has already passed the security check against bots, so that it is not repeated on every visit. | 1 year |
| Analytics (only if you accept) | _ga |
Third-party — Google Analytics | Distinguishes unique visitors in order to compile traffic statistics. With Google Analytics 4, your IP address is not recorded or stored. | Up to 24 months |
| Analytics (only if you accept) | _ga_<container-id> |
Third-party — Google Analytics | Maintains session state for Google Analytics 4 reporting. | Up to 24 months |
Cookies marked as necessary are exempt from consent under Article 22.2 LSSI-CE: they remember your preferences and your decision about cookies, keep your customer dashboard session open, or are strictly necessary to collect a payment you have requested and to protect it against fraud and automated access. Payment cookies are set only on the payment page, within the checkout. The two analytics cookies (_ga and _ga_<container-id>) are not set unless you accept them, and they are deleted if you later reject them.
4. How your consent is requested
On your first visit you will see a banner explaining what we use cookies for and linking to this policy. Until you decide, no non-necessary cookie is set: browsing, scrolling the page, or closing the banner does not amount to acceptance. Accept and reject are on an equal footing and take the same effort: a single click. If you reject, the site works just the same; we simply stop measuring the visit.
Your decision is stored together with its date and expires after 24 months, at which point we will ask you again, in line with the criteria of the Spanish Data Protection Agency (AEPD). We will also ask you again sooner if we change the purposes or introduce new cookies that require your consent.
Record of your decision. Each time you accept, reject or change your cookie settings, we store an entry on our server so that we can demonstrate the consent obtained, as required by Article 7(1) GDPR. The entry contains only the random identifier stored in dvx-consent, the date and time, the button you used, whether you accepted or rejected analytics cookies, and the version of the notice and of this policy that was shown to you. It does not include your IP address or your browser, and we do not link the identifier to any person. We keep each entry for 30 months (the maximum of 24 months for which your consent is valid plus the 6-month limitation period for the corresponding infringement) and then delete it.
5. How to change or withdraw your decision
You may change your mind at any time, without giving reasons and with the same effort it took to accept: in the bottom-left corner of every page there is a permanent cookie icon that reopens the banner. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.
6. How to block or delete cookies from your browser
Independently of the above, your browser lets you block cookies before they are set and delete those you already have. Deleting them also deletes the decision stored in your browser, so we will ask you again on your next visit. The usual paths are:
- Google Chrome: Settings → Privacy and security → Cookies and other site data.
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Microsoft Edge: Settings → Cookies and site permissions.
- Safari: Settings/Preferences → Privacy.
If you block all cookies and local storage, the site will remain accessible, but it will not be able to remember your theme preference or your cookie decision, so the banner will reappear on every visit.
7. Personal data and transfers
Analytics cookies process personal data (a browser identifier and browsing data). The controller is Dalvox Global Systems, S.L.U., the legal basis is your consent (Art. 6(1)(a) GDPR and Art. 22.2 LSSI-CE), and the recipient is Google Ireland Limited, acting as our processor. The data may be transferred to Google LLC, in the United States, under the EU-U.S. Data Privacy Framework, under which Google LLC is certified. You can find details of international transfers and how to exercise your rights in our Privacy Policy, or write to us at support@dalvoxcapital.com.
8. Changes to this policy
We may update this Cookie Policy if the cookies we use or the applicable legislation change. We will publish the updated version on this same site, indicating the date of the last update, and where the change affects the purposes we will ask for your consent again.