1. Controller Identification
In compliance with Law 34/2002 of July 11 on Information Society Services and Electronic Commerce (LSSI-CE), we inform you that the Nextaur web platform (hereinafter, the "Platform") uses cookies and local storage technologies. The controller of data collected through these technologies is:
Owner: Erik Armenteros del Castillo
Tax ID (NIF): 51988106X
Registered address: Calle Pico de los Artilleros, Madrid, 28030, Spain
Legal and privacy contact: legal@nextaur.com
2. What are cookies and similar technologies?
Cookies are small text files that websites store in the user's browser to remember preferences, keep sessions securely signed in, or ensure the proper technical functioning of the site.
In addition to traditional cookies, Nextaur uses similar technologies such as local storage (localStorage and sessionStorage), which serve identical technical functions but store information directly in your browser.
3. Types of cookies we use
Nextaur uses strictly necessary cookies (always on) together with optional analytics and marketing cookies, which are installed only if you give consent through the banner (accept all, reject, or configure).
Technical and functional cookies remain necessary to:
- Keep your user session securely signed in.
- Remember your basic interface preferences (such as language or currency).
- Process payments securely.
- Protect the platform against cyberattacks, abuse, or bots (security).
- Enable secure playback and download of audiovisual content through signed links.
If you accept analytics, we load Google Analytics 4 to measure visits, channels, and the sign-up funnel. If you accept marketing, we load Meta Pixel and send conversion events to Meta (Conversions API) to measure and optimize ads. You can reject both categories; the site will still work.
Note on internal telemetry: Nextaur also collects technical data about the use of platform tools (which modules are used and for how long), processing it directly on our servers for service maintenance and improvement, without using third-party cookies for this purpose. For more details, see our Privacy Policy.
4. First-party cookies we use
The following cookies are managed directly by the Nextaur domain (nextaur.com) for platform operation:
| Cookie name | Purpose | Category | Expiry |
|---|---|---|---|
| sb-*-auth-token (and variants) | Authentication, session maintenance, and security (Supabase tokens). | Technical / Strictly necessary | Session / Renewable |
| nextaur-locale | Remembers the user's preferred interface language. | Technical / Preferences | 1 year |
| nx_billing_currency | Displays prices in the appropriate currency based on region. | Technical / Functional | 30 days |
| cookie_consent_v2 | Stores your cookie banner choice (necessary / analytics / marketing). | Technical | 12 months |
| CloudFront-Policy (and signatures) | Authenticates access to CDN servers (Amazon CloudFront) to load videos securely. | Technical / Security | Session (~1 hour) |
5. Third-party cookies and scripts
Nextaur integrates third-party tools. Stripe, reCAPTCHA, Google OAuth, Cal.com, and Sentry activate with the corresponding feature. Google Analytics and Meta Pixel/CAPI load only if you have consented to analytics or marketing in the banner:
| Provider | When activated | Purpose |
|---|---|---|
| Stripe | When starting payment for a subscription. | Stripe technical and security cookies (js.stripe.com) to process payment, apply anti-fraud rules, and verify bank authentication (3D Secure). |
| Google reCAPTCHA v3 | When you interact with the registration or contact form (not loaded on page visit alone). | Browser behavior analysis to distinguish humans from automated bots, preventing spam. |
| Google OAuth | When you choose "Continue with Google". | Google session cookies (accounts.google.com) to authenticate your identity and access the platform without a password. |
| Cal.com | When you click «Book a demo» (not loaded when you visit the page). | Cal.com technical cookies (app.cal.com) to show availability and record the meeting booking. |
| Sentry | In production environments, while using the platform. | Technical error and performance telemetry (sentry.io) to detect failures and improve stability. Not used for advertising or marketing analytics. |
| Google Analytics 4 | Only if you accept analytics cookies. | Measurement of page views, acquisition channel, and funnel events (pricing, demo, sign-up, contact). Typical cookies: _ga, _ga_*. Retention: 14 months. |
| Meta Pixel and Conversions API | Only if you accept marketing cookies. | Conversion measurement and ad optimization (ViewContent, Lead, CompleteRegistration, Contact). Typical cookies: _fbp, _fbc. Events may also be sent from our servers (CAPI). |
6. Local storage (localStorage and sessionStorage)
In addition to cookies, we use your browser's internal storage to keep temporary information needed during your use of the platform. This information is not used for tracking:
localStorage (Persistent): We use it to remember whether you prefer the platform's light or dark theme, and to store your cookie choice (cookie_consent_v2). This information is not deleted when you close the browser.
sessionStorage (Temporary): We use it to store temporary drafts (such as when creating a project, an activity, or filling out a payment form) and to manage sign-in or password recovery steps. All this temporary data is automatically deleted when you manually sign out of the platform.
7. Legal basis and international transfers
Cookies that are strictly necessary to provide the service you requested (using the B2B SaaS platform) and to ensure network security do not require your prior explicit consent (Art. 22.2 LSSI). Analytics cookies (Google Analytics 4) and marketing cookies (Meta Pixel/CAPI) do: legal basis Art. 6.1.a GDPR (consent). You may withdraw it at any time from the banner or the preferences button on this policy.
Third-party providers used (Stripe, Google, Meta, and Sentry) may carry out technical data transfers to the United States, which are covered by Standard Contractual Clauses (SCCs) approved by the European Commission and the EU-U.S. Data Privacy Framework.
8. How to manage or delete cookies
You can accept, reject, or configure optional cookies (analytics and marketing) from the banner or the preferences button on this page. If you also block necessary cookies in your browser, you will likely be unable to sign in, play videos, or pay for a subscription.
If you wish to delete cookies already installed, you can do so in your browser settings:
- Google Chrome: Settings > Privacy and security > Cookies and other site data.
- Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data.
- Safari: Preferences > Privacy > Block all cookies.
- Microsoft Edge: Settings > Cookies and site permissions > Manage and delete cookies.