Privacy Center

Cookie Policy.

A complete, audit-friendly disclosure of every cookie and similar technology used on companyprospect.com — what it does, who sets it, how long it lives, and how to disable it. Aligned with AEPD (Spain), CNIL (France), ICO (UK) and EDPB guidelines.

Last updated: April 28, 2026 Version: 2.0

01What cookies are

Cookies are small text files that a website stores on your browser. The term in this policy also covers similar technologies with the same effect — including localStorage, sessionStorage, IndexedDB, pixels, and tracking tags — which is the scope used by Article 22 LSSI (Spain), the ePrivacy Directive (EU/EEA) and PECR (UK).

Cookies that are strictly necessary to deliver a service explicitly requested by you do not require consent. Every other category requires your prior, informed and granular consent before the cookie is set.

02How we use cookies

CompanyProspect is a B2B tool. Our public website (this domain) is intentionally lean: we don't run advertising, we don't sell user data, and we don't deploy cross-site tracking, fingerprinting, or social-media plugins. We use only two categories of client-side storage, both listed below.

We do not use:

Advertising or marketing cookies of any kind.
Social-media share buttons that load third-party scripts.
Session-replay tools (e.g. Hotjar, FullStory, LogRocket).
Cross-device or cross-site identifiers, fingerprinting, or device graphs.
Google Signals, Google Ads, DoubleClick, or any ad-personalization signals.

03Categories

Strictly necessary Always active

Required for the site to function — for example, to remember that you've already answered the cookie banner, or that you prefer dark mode. These are stored in your browser's localStorage rather than HTTP cookies, never leave your device, and contain no personal identifiers. No consent required (Art. 22.2 LSSI).

Analytics Opt-in only

Anonymous traffic measurement via Google Analytics 4. We use it to see which pages are read and what the traffic pattern is, so we can prioritise content and fix slow pages. We never enable advertising features, Google Signals, or cross-device tracking on this property — see Section 05 for the exact configuration.

Analytics are off by default. They only activate if you click "Accept all" or enable the Analytics toggle in our consent banner. You can withdraw this consent at any time — see Section 07.

04Cookie inventory

The full list of cookies and similar technologies that may be set on your browser when you visit this site, with provider, purpose, type and lifetime.

Name	Provider	Category	Purpose	Type / lifetime
cp_cookie_consent_v2	CompanyProspect (first-party)	Necessary	Stores your cookie-consent decision (accept / reject / custom and the chosen toggles) so we don't ask again on every page load. Also forms the proof-of-consent record.	localStorage persistent (until cleared)
theme	CompanyProspect (first-party)	Necessary	Remembers your light/dark theme preference.	localStorage persistent
_ga	Google LLC (third-party)	Analytics	Distinguishes unique visitors with a randomly generated ID. IP-anonymised before any logging.	HTTP cookie 2 years
_ga_4EV63VRB30	Google LLC (third-party)	Analytics	Persists session state for the GA4 property. Set per property (the suffix is our GA4 measurement ID).	HTTP cookie 2 years

We will update this table within 30 days of any change. The list mirrors what the consent banner shows in its "Customize" panel.

05Google Analytics 4 — exact configuration

We have configured GA4 to the strictest settings compatible with the product, in line with the AEPD's Guía sobre el uso de las cookies (2024) and the CNIL's position on Google Analytics. The following are the values applied on every page load for every user who consents to analytics.

IP anonymisation

anonymize_ip: true

The last octet of every IPv4 address (and the equivalent IPv6 range) is dropped on Google's edge before any logging — your full IP is never stored.

Google Signals

allow_google_signals: false

No cross-device or cross-session linking via your Google account. Demographics & interests reports are disabled.

Ad personalisation

allow_ad_personalization_signals: false

No data is shared with Google Ads, DoubleClick, or any audience-building product.

Data retention

14 months

User-level and event-level data is automatically deleted after 14 months — the AEPD/CNIL minimum bar — instead of the GA4 default of 26+ months.

Default consent

analytics_storage: 'denied'

Set via Google Consent Mode v2 before any GA library loads. While consent is denied, the GA library only emits anonymous cookieless pings for aggregated traffic measurement — no cookies, no identifiers, no cross-visit tracking. Full measurement activates only after you opt in.

Ad-storage / ad-user-data

'denied' (always)

Never granted — even if you accept analytics. We don't run ads, so these signals are permanently off.

The script that enforces all of the above is open and inspectable at /cookie-consent.js. Independent researchers, regulators or auditors can verify the runtime behaviour with any browser's DevTools (Network & Application panels) without needing to interact with us.

07Managing your consent

You can change or withdraw your decision at any time. There are three equivalent entry points:

The Cookie preferences link in the footer of every page.
The button below.
Clearing your browser storage for this domain — the banner will reappear on your next visit.

08Browser-level controls

Every modern browser lets you block or delete cookies for a specific site. Note that blocking strictly-necessary storage may break basic functionality (e.g. the consent banner will appear on every page).

We also honour the Global Privacy Control signal where supported: if your browser sends Sec-GPC: 1, we treat it as a request not to share or sell personal information (we don't anyway), and we apply it to the analytics opt-in for the session.

09Changes to this policy

If we add a new cookie or change a provider, we will update this page within 30 days and bump the version number at the top. Material changes (e.g. adding a new third-party processor) trigger a fresh consent prompt — your previous decision does not carry over.

10Contact & complaints

Privacy team: privacy@companyprospect.com — for any question, complaint or rights request (access, deletion, opt-out).

Right to lodge a complaint: if you live in the EU/EEA you can also file a complaint with your national supervisory authority. In Spain that is the Agencia Española de Protección de Datos (AEPD); the full list of EU authorities is on the EDPB website.

Quick removal: if your goal is to be removed from our database, the fastest path is the opt-out form — it goes to the same team and is auto-tracked.