Cookie Policy
Last updated: September 17, 2026
This English version is provided for convenience only. In the event of any discrepancy between this version and the Spanish version, the Spanish version shall prevail.
This Policy describes the use of cookies and similar technologies by Genealogic, in accordance with article 22.2 of Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), the Spanish Data Protection Agency (AEPD) Guide on the use of cookies, in its current version, and the guidelines of the European Data Protection Board (EDPB).
1. What is a cookie?
A cookie is a small text file that a website stores in the user’s browser to remember information about the session, preferences or use of the website. In addition to cookies, other technologies such as local storage (localStorage) or sessionStorage may perform similar functions.
2. Types of cookies we use
2.1 Strictly necessary (technical) cookies
Essential for the basic operation of the website. They make it possible to keep the session signed in and to provide the service requested by the user. They are exempt from the consent requirement under art. 22.2 LSSI-CE.
| Cookie / key | Provider | Purpose | Duration |
|---|---|---|---|
| sb-*-auth-token | Genealogic (first-party), using the authentication service of Supabase Inc. (third-party provider) | Keep the user session signed in | 400 days; renewed while you use the session and deleted when you sign out |
| sb-*-auth-token-code-verifier | Genealogic (first-party), using the authentication service of Supabase Inc. (third-party provider) | Securely complete sign-in with Google or the email confirmation of a new account | Deleted once sign-in is completed (maximum 400 days) |
On the sign-in, registration, password recovery and kennel contact forms we use Cloudflare Turnstile (Cloudflare, Inc.) to stop bots. It is loaded from a Cloudflare domain and does not set cookies on ours.
2.2 Local storage (localStorage)
We use the browser’s localStorage to store User preferences and other operational data on your device. This information is not sent to our servers, except for the session tokens of saved accounts, which are used when you switch accounts:
| Key | Purpose |
|---|---|
| cookie-consent | Remember your choice on the cookie banner (accept / reject) |
| sidebar-collapsed | Side menu state |
| dogs-sort, litters-sort | Sorting preferences |
| dogs-view, litters-view | View preferences (grid / list / table) |
| genealogic-lang | Selected language |
| onboarding-* | Getting-started guides hidden or collapsed by the user |
| genealogic:recent-views | Recently viewed profiles (dogs, kennels and breeds), to show them in search |
| genealogic.reservationChatOpen | Whether the messages panel of a reservation is open or closed |
| genealogic:accounts | Accounts signed in on this browser (email, name, photo and session tokens), to switch between them without signing in again. Each account is removed when you sign out of it |
2.3 Analytics, marketing or advertising cookies
With your prior consent (cookie banner), we use analytics and session recording tools to understand how the platform is used and to improve it. These cookies and technologies are not activated if you reject the banner or if you do not accept it. We do not use advertising or marketing cookies.
Google Analytics 4 (Google Ireland Ltd.), for aggregated usage statistics. According to Google, Google Analytics 4 does not log or store IP addresses.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Ireland Ltd. | Distinguish users (aggregated analytics) | 2 years |
| _ga_* | Google Ireland Ltd. | Maintain the analytics session state | 2 years |
Google Analytics may involve a transfer of data to Google based on the EU-US Data Privacy Framework and on Standard Contractual Clauses (SCCs).
PostHog (PostHog, Inc., data hosted in the European Union region), for product analytics, heatmaps and browsing session recording, which allows us to see how people interact with the interface in order to detect errors and friction points. In the recordings, everything typed into forms is masked: passwords, email addresses and any other data entered are not captured. In addition, in the logged-in app and on contract pages, the recordings do not capture the text or images shown on screen.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| ph_*_posthog | PostHog, Inc. | Identify the device/session for product analytics and session recording | 1 year |
PostHog hosts the data on servers in the European Union, but PostHog, Inc. is a US company: its use may involve a transfer of data to the United States based on the EU-US Data Privacy Framework, in which PostHog, Inc. participates.
You can withdraw your consent at any time with the “Change my cookie preferences” button: it deletes your choice and any analytics cookies and data already stored in your browser, analytics stop working immediately and the banner is shown again so that you can make a new choice. Deleting only the cookies is not enough, because your choice is stored in the browser’s local storage (key cookie-consent).
2.4 Stripe cookies (payment gateway)
When you access the payment portal, Stripe may set cookies that are necessary to prevent fraud and for the gateway to work (m-stripe-csrf, __stripe_mid, __stripe_sid). These cookies are governed by Stripe’s cookie policy and are activated only during the payment flow.
2.5 Other first-party cookies
In addition to the above, the website sets these first-party cookies to remember your preferences, complete the sign-up process and learn where visits come from:
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| genealogic-lang | Genealogic (first-party) | Remember the language in which the website is shown (Spanish or English). It is set on the first visit based on the browser language and changes when you choose another language | 1 year |
| googtrans | Genealogic (first-party); the Google Translate script (Google Ireland Ltd.) also writes it | Remember the language into which you ask for public pages to be translated when you choose one without our own translation (Italian, French, German or Portuguese). The Google Translate widget reads it and sends the page text to Google to be translated | 1 year (the copies written by the Google script last for the session) |
| dashboard-mode | Genealogic (first-party) | Remember the dashboard mode you have chosen | 1 year |
| genealogic_signup_intent | Genealogic (first-party) | Remember the profile (breeder or owner) and the plan chosen when arriving at registration, to apply that plan when you create your kennel even if sign-up goes through Google or email confirmation | 7 days; deleted earlier if you create your kennel |
| signup_meta | Genealogic (first-party) | Remember how you reached the website (UTM campaign parameters, referring website and landing page) so that, if you sign up, it is saved in your profile and we know which channels bring us users | 30 days |
3. Legal Basis for the Use of Cookies
- Strictly necessary cookies: art. 22.2 LSSI-CE (exempt from consent).
- Analytics and session recording cookies (Google Analytics, PostHog): consent of the User (art. 6(1)(a) GDPR and art. 22.2 LSSI-CE), which may be withdrawn at any time.
- Stripe cookies: performance of the contract when the User initiates the payment.
4. Managing Cookies in the Browser
You can configure your browser to block or delete cookies, either globally or on a per-site basis. Please note that if you block session cookies, Genealogic will not be able to keep you authenticated.
5. Changes to this Policy
This Policy may be updated to reflect technical or legal changes. The “last updated” date above indicates the version currently in force. We recommend that you review it periodically.
6. Contact
For any inquiry about cookies, write to hola@genealogic.io.
Need to clarify something or exercise a GDPR right? Write to us at hola@genealogic.io. We reply within 72 hours.