This is a courtesy translation. The legally binding text is the Spanish version, at factuza.com/legal/cookies. Where this translation differs from it, the Spanish version prevails.
The short version
This site only uses technical cookies, the ones strictly required for what you asked for to work: keeping you logged in to the client area and protecting the forms. There is no advertising, there are no social-network pixels and there is no cross-site tracking.
We do count how many times each page is viewed, and we count it in a specific way: without putting anything in your browser, without storing your IP address and without that data leaving our server. All that is stored is a number per day and per page. We do not know —and cannot know— how many distinct people visit us, because that would mean marking your browser and we do not do it. It is all explained just below.
That is why you will not see a consent banner: article 22.2 of the Spanish LSSI exempts strictly necessary cookies from the consent requirement, and first-party, aggregate audience measurement that is shared with nobody does not require your permission. If one day we start measuring in a different way —with identifiers, or with a third-party tool— a banner will appear with a real option to refuse, and this page will say so first.
What a cookie is
A small file that a site stores in your browser to remember something between one page and the next. It can be a session cookie (deleted when you close the browser) or a persistent one (lasting a set period), and first-party or third-party depending on who places it.
The ones we use
| Cookie | Set by | What for | Duration |
|---|---|---|---|
StaticWebAppsAuthCookie |
First party (hosting platform) | Keeping you logged in to the client area. Without it you would have to identify yourself on every page. | Session / up to 8 hours |
Nonce |
First party | Protecting the login process against replay attacks. | A few minutes, during login |
| Microsoft Entra cookies | Microsoft (identity provider) | Authenticating you when you press “Log in”. They are set on Microsoft's domain, not ours, and only if you log in. | Per their own policy |
The public site —home page, pricing, newsletter and these legal pages— sets no cookies at all. You can browse all of it without anything being stored in your browser.
How we count visits
Each time a public page loads, your browser sends one line to our own server. With it we add one to a counter. This is literally everything that gets stored:
These legal pages are not counted. They have a stricter security configuration that stops them talking to any server, not even ours, and we preferred to leave it as it is rather than relax it to find out how many people read them. The client area is not counted either: that is the application, not the website.
| What is stored | Example |
|---|---|
| The day | 2026-08-26 |
| The page | /gestorias |
| The page's language | es |
| The domain you arrived from, if any | google.es |
| How many times | 37 |
And this is what is not stored, which is the part that matters:
- Not your IP address. It is used for an instant to stop anyone calling thousands of times in a row, and then discarded. It is never written down anywhere.
- No identifier of yours. No cookie, no local storage, no browser fingerprint. Nothing that would let us recognise you from one page to the next, today or next month.
- Not even the time. Only the day. With low traffic, the exact time would allow one person's path through the site to be reconstructed, and that is why it is not stored.
- Not what you searched for. From the site you arrive from we store the
domain (
google.es), never the full address, which would contain what you typed into the search box. - Nothing carrying data in the address. If a page is opened with a code or an email address in the URL, that visit is discarded entirely rather than an attempt being made to clean it.
The data stays on our server and is shared with nobody: we do not use Google Analytics or any external measurement service, precisely because calling a third party's server from your browser would show your IP address to another company.
Since there is no identifier, this data does not relate to any identified or identifiable
person, so there is no processing of personal data over which you could exercise rights. If you
would rather not appear even in that count, a content blocker that prevents
/visitas.js from loading avoids it, and the site works exactly the same.
What we do not use
- Google Analytics or any other third-party measurement tool. The page-view count is done by our own server, as explained above.
- Meta, LinkedIn, TikTok or similar pixels.
- Advertising or profiling cookies.
- Fonts or libraries loaded from third-party servers: they are served from our own domain. When you visit us, your browser only talks to our servers —this website and the server Factuza runs on— so no outside company sees your IP address.
Local storage in the application
The Factuza application (not this website) is a progressive web app and, in order to work offline, stores data in your browser's local storage: invoice drafts and interface preferences. Technically these are not cookies —they are not sent to the server— but we are telling you because the effect for you is similar. They are removed when you log out or when you clear the site's data from your browser.
How to control them
You can delete or block cookies from your browser's settings. Bear in mind that if you block technical cookies you will not be able to log in to the client area, because they are precisely the ones that keep the session going.
Changes
If we change the cookies the site uses, we will update this page and its date. Any cookie that is not strictly necessary will be activated only after your express consent.
Questions: privacidad@factuza.com.