Cookie Policy

1. Scope and definitions

Although not all browser storage is a cookie, it is documented together to explain Service sessions and preferences completely.

2. Public website and consent control

En el sitio público, Epistemic LAS no solicita Google Tag Manager, Google Analytics 4 ni futuras etiquetas publicitarias antes de que la persona elija. Las preferencias analítica y de marketing están desactivadas de forma predeterminada y se gestionan por separado. Aceptar todo y rechazar todo tienen la misma prominencia; también puede personalizar o retirar la elección en cualquier momento. El idioma continúa en el parámetro lang de la URL y no requiere almacenamiento del navegador.

3. WordPress cookie inventory

These cookies belong to the sign-in screen or editorial dashboard, not ordinary public browsing:

• wordpress_test_cookie — checks whether the browser accepts cookies when the sign-in screen opens, including before authentication; it is strictly necessary and lasts for the browser session.
• wordpress_[hash] and wordpress_sec_[hash] — authenticate and protect the dashboard. Without “Remember Me”, the browser cookie is session-based and default authentication is valid for up to two days; with “Remember Me”, it may persist for up to fourteen days.
• wordpress_logged_in_[hash] — identifies the signed-in session on authorized surfaces; it follows the selected authentication duration.
• wp-settings-[UID] and wp-settings-time-[UID] — remember dashboard preferences for the identified user; WordPress retains them for one year.
• wp_lang — temporarily remembers the language selected on the sign-in screen; it lasts for the session.

4. SaaS localStorage inventory

The authenticated application uses first-party local storage for technical session credentials, institutional context, and preferences. localStorage has no automatic expiry: authentication material is removed when the session is closed or invalidated under the application flow, while context and preferences remain until changed, removed, or browser storage is cleared.

• Technical session credentials — authenticate and renew access; they are strictly necessary for the user-initiated experience and are removed through the available sign-out or invalidation flows.
• Institutional context and preferences — retain the selected organization and interface language until changed, removed, or browser storage is cleared.

5. SaaS sessionStorage inventory

sessionStorage retains transient access, activation, and screen-preference data until the user closes the tab or browser session. This data supports only the requested flow and is not used for advertising, commercial profiling, or cross-site tracking.

6. Internal operations cookie

The internal operations area uses its own strictly necessary session cookie restricted to authorized personnel. It is HttpOnly, SameSite=Strict, Secure outside development, lasts two hours, and is not used on the public website or ordinary educational experience.

7. Google measurement and non-essential technologies

Google Ireland Limited provides Google Tag Manager, Google Analytics 4 and, once the advertising account is linked, Google Ads. With analytics consent, pages, scrolls, and outbound clicks are measured; with marketing consent, campaigns and conversions may be attributed. We record a genuinely confirmed form submission as generate_lead, but do not send Google the name, email, telephone, organization, message, or any other form field.

Measurement data may include online identifiers, device and browser information, URL, previous page, time, and interactions. Google may process it on infrastructure outside the European Economic Area under the mechanisms and safeguards described in its terms and privacy policy.

• epistemic_las_consent_v1 — first-party localStorage preference, strictly necessary to remember analytics and marketing choices; remains until changed through “Cookie settings” or browser storage is cleared.
• Google Tag Manager — manages authorized tags; container GTM-KHJSJRJS loads only after the relevant consent.
• _ga — first-party Google Analytics 4 cookie used to distinguish visitors; default duration of two years, subject to browser limits.
• _ga_<container-id> — first-party Google Analytics 4 cookie used to retain session state; default duration of two years, subject to browser limits.
• _gcl_* — advertising measurement cookies, such as _gcl_aw and _gcl_gs, which may be enabled with Google Ads and marketing consent; they last 90 days. The linker may also retain ad-click information in localStorage under _gcl_ls.

8. Control, changes, and contact

You can change or withdraw optional purposes through “Cookie settings” and delete or block cookies, localStorage, and sessionStorage through browser tools. Blocking strictly necessary technologies may prevent authenticated access, preferences, or the editorial dashboard from working.

We will review this inventory before enabling a new provider or purpose. Google’s policies are available at policies.google.com/privacy and policies.google.com/technologies/cookies. Questions: info@epistemic-las.com.