Cookie Policy
Last updated: August 2026
At Prep'd we use cookies and similar technologies on the prepd.es website. This policy explains what they are, which ones we use, what we use them for and how you can manage or reject them at any time.
1. Data controller
The party responsible for processing data obtained through cookies is:
Legal entity: Prep'd Mallorca S.L.
Tax ID: B16602047
Address: Vilafranca de Bonany, 07250 Balearic Islands, Spain
Contact email: hello@prepd.es
Website: https://prepd.es
2. What is a cookie?
A cookie is a small text file that a website stores in your browser or device when you visit it. It allows the site to remember information about your visit, such as your chosen language or the items added to your basket, and to work properly on subsequent visits.
Along with cookies, we also use similar technologies such as the browser's local storage (localStorage and sessionStorage), which serve comparable purposes. When this policy refers to cookies, it also covers these technologies.
3. Types of cookies
Cookies can be classified in several ways:
By who manages them:
- First-party cookies: managed by Prep'd from its own systems.
- Third-party cookies: managed by other parties that provide services to us (for example, the payment gateway).
By how long they remain active:
- Session cookies: deleted when you close the browser.
- Persistent cookies: remain on the device for a defined period, until they are deleted manually or expire.
By purpose:
- Technical or necessary cookies: essential for the website to function (logging in, keeping the basket, remembering your cookie choice, processing a payment). They do not require your consent.
- Preference or personalisation cookies: remember options such as language to improve your experience.
- Analytics or measurement cookies: let us understand how the site is used (which pages and steps people use, where they drop off) to improve it. They require your consent.
4. Cookies we use
Below is a detailed list of the cookies and similar technologies used by prepd.es.
4.1. Technical and necessary cookies and storage (first-party)
These are essential for the website to work and do not require consent. They include cookies and similar browser storage (localStorage).
| Name | Purpose | Duration |
|---|---|---|
| __cf_bm | Cloudflare: detects automated/bot traffic to protect the site | Session (about 30 minutes) |
| __dpl | Cloudflare: technical routing of website delivery | Persistent (about 7 days) |
| session-id | Keeps your session active and signs you in to the partner dashboard | Session |
| prepd_cookie_consent | Saves your cookie choice so we don't ask again (stored in local storage) | Persistent (up to 24 months) |
| Shopping basket | Remembers the packs you've added during your visit (stored in local storage) | Session |
| Language preference | Remembers your chosen language (stored in local storage) | Persistent (up to 12 months) |
Separately, we keep a strictly necessary anonymous aggregate count of six diagnostic events (reaching checkout, a lost partner referral, a property search with no results, "my property isn't listed", and whether analytics cookies were accepted or declined). Only a daily total per event, with the partner link involved, is stored: no cookie, session identifier, IP address or any other data that could identify you, so this does not require consent.
These items do not require consent because they are essential for the website to work.
4.2. Analytics cookies and storage (first-party)
These are only used if you accept analytics in the cookie banner. They are first-party: the information is stored in our own backend and is not shared with any third party or advertising network.
We use them to understand how visitors move through the Shop and Build Your Own pages so we can improve them. This includes which category tabs are opened, items added to or removed from the basket, basket value reached, whether checkout is started and completed, and how long is spent on each category. Events are linked to your visit using your existing session identifier, not a separate tracking cookie. Consent is checked on every event, and if you withdraw it the session identifier used for analytics is cleared.
| Name | Purpose | Duration |
|---|---|---|
| Usage analytics (first-party) | Records anonymous page-flow events (tabs viewed, items added, basket value, checkout started/completed, time per category) to measure drop-off and improve the Shop and Build Your Own pages. Linked to your session and stored in our own backend. | Session (cleared if analytics consent is withdrawn) |
| Visitor identifier (first-party) | A random identifier kept in local storage so repeat visits from the same browser are counted as one visitor rather than several. Created only after you accept analytics, and deleted if you withdraw consent. | Persistent (30 days from your last visit) |
If you do not accept analytics, these events are not recorded.
4.3. Third-party cookies (integrated services)
| Service | Purpose | More information |
|---|---|---|
| Stripe | Current payment processor. Processes payments securely and prevents fraud at checkout. Loaded only at checkout. | stripe.com/privacy |
| Paycomet (Banco Sabadell) | Payment processor being introduced. Processes card, Apple Pay and Bizum payments securely. Loaded only at checkout. | paycomet.com |
| Redsys | Underlying Spanish payments network used for card authorisation and 3D Secure. | redsys.es |
| Google Calendar | Allows booking a call from the partners page through Google's embedded calendar | policies.google.com/privacy |
5. Legal basis and consent
Technical or necessary cookies are used on the basis of Prep'd's legitimate interest in guaranteeing the proper functioning of the website, and do not require your consent.
All other cookies (preferences, analytics and third-party cookies that are not strictly necessary) are only installed if you give your consent. The first time you enter prepd.es we show a banner where you can:
- Accept all cookies.
- Reject all non-necessary cookies.
- Configure and choose by category.
You can change your decision at any time from the cookie settings link available on the site, without affecting normal use of the website.
6. How to configure or reject cookies
In addition to the on-site settings panel, you can manage, block or delete cookies from your browser settings. Here are the official links:
- Google Chrome: support.google.com/chrome/answer/95647
- Mozilla Firefox: support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
- Safari (desktop): support.apple.com/guide/safari/sfri11471/mac
- Safari (iPhone and iPad): support.apple.com/HT201265
- Microsoft Edge: support.microsoft.com/microsoft-edge
Please note that if you block or delete technical cookies, some site features (such as the basket or signing in) may not work properly.
7. International data transfers
Some of the providers we use (for example, Google or the payment gateway) may process data outside the European Economic Area. These transfers are made with the safeguards required by European data protection law, such as the Standard Contractual Clauses approved by the European Commission. You can review the details in each provider's privacy policy linked in this policy.
Our first-party analytics (section 4.2) are stored in our own systems and are not shared with third parties.
8. Retention period
Each cookie is kept for the period indicated in the tables in section 4. Once its purpose is fulfilled or the period expires, the information is deleted. The consent you give us is kept for a maximum of 24 months, after which we will ask for your choice again.
9. Updates to this policy
We may update this Cookie Policy to adapt it to legal, technical or service changes. We recommend reviewing it periodically. The date of the last update appears at the top of the document.
10. More information
If you have any questions about the use of cookies on prepd.es, write to us at hello@prepd.es.
You can also consult our Privacy Policy and our Legal Notice, as well as the cookie guide of the Spanish Data Protection Agency (AEPD) at www.aepd.es.