Cookie policy
Draft pending legal review. Not to be treated as final.
The public pages of this website — everything except /dashboard — use no cookies, first-party or third-party, and do not track their visitors. They also load no external resources: everything is served from this domain.
What this policy covers
This policy describes every cookie on verifactucloud.com and its subdomains. Today there are two, both session cookies and both required for the application that sets them to work at all: one in the partner dashboard, and one in the invoicing app at facturas.verifactucloud.com. Neither is third-party, neither is used for analytics or advertising, and neither is shared between subdomains: each is sent only to the server that set it.
The partner dashboard
The partner dashboard, at /dashboard, does use a cookie. The dashboard cannot work without it: there is no other way to keep you signed in or to protect the forms. It is not used for analytics, for advertising, or to follow anyone between sites.
- Name
vfc_session- Purpose
- Identifies the signed-in session and protects the forms against submissions from other sites.
- Lifetime
- At most the length of the session: 12 hours once signed in, 30 minutes before. Deleted when you sign out.
- Scope
- /dashboard only. The public pages never receive it.
The invoicing app
The invoicing app, at facturas.verifactucloud.com, uses its own session cookie, for the same purpose and with the same guarantees. It is served by a different server and the cookie belongs to that subdomain alone: neither the pages on verifactucloud.com nor the partner dashboard ever receive it, and it never receives theirs.
- Name
facturas_session- Purpose
- Identifies the signed-in session and protects the forms against submissions from other sites.
- Lifetime
- At most the length of the session: 12 hours once signed in, 2 hours before. Deleted when you sign out.
- Scope
- facturas.verifactucloud.com only. Neither the public pages nor the dashboard ever receive it.
Both are technical, “strictly necessary” cookies in the sense of article 22.2 of Spain's LSSI-CE, so they need no prior consent and no banner. Each holds only a random identifier; the session data is kept on our servers and deleted when it expires.