Last updated: June 2026
This Cookie Policy provides information to users who visit the website of Affle Iberia, S.L. ("Mediasmart") at www.mediasmart.io (the “Website”) about the use of cookies and similar tracking technologies installed on user’s devices. This Policy aims to inform users about what cookies are, how they are used on our Website, and how users can manage their installation and use.
1. What are cookies?
Cookies are small text files that a website or app stores on a user's device, containing certain information about that user. This information may be accessed by Mediasmart or its partners when you browse or access the Website or any partner sites or applications. Other tracking technologies similar to cookies also exist, including web beacons, tracking pixels, and local storage mechanisms. These technologies may serve various purposes, such as recognising users, understanding browsing habits, or personalising content display. The specific uses we make of these technologies are described below in this Policy.
2. What types of cookies does Mediasmart use?
Cookies can be classified according to (i) their provider and (ii) their purpose. By provider: • First-party cookies: cookies sent to your device from a domain managed by Mediasmart. • Third-party cookies: cookies sent to your device from a domain managed by a third party (e.g. HubSpot, Google, Cloudflare), which processes the data obtained through them. By purpose: • Strictly necessary cookies: essential for the Website to function correctly. They cannot be disabled. • Analytical/performance cookies: used to understand how visitors interact with the Website, helping us improve its performance. • Functional cookies: enable enhanced functionality and personalisation, such as language preferences or chat settings. You can find the full list of cookies we use in Section 8 of this Policy.
3. Information about third-party providers
Cookies categorised as third-party cookies are used and managed by external entities. Users can obtain more information about these third parties via the links provided in Section 8.
4. How can I manage cookies?
Users can accept or reject (in whole or in part) the use of cookies and similar tracking technologies through the banner displayed on their first visit to the Website, when cookies expire, or when browsing in private/incognito mode. Users may also disable cookies through their browser settings. For more information on how to manage cookies in the most common browsers: • Chrome: https://support.google.com/chrome/answer/95647 • Safari: https://support.apple.com/kb/ph21411 • Firefox: https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored • Microsoft Edge: https://support.microsoft.com/en-us/help/17442 Please note that disabling all cookies may prevent you from using certain features of the Website that depend on them. To opt out of Google Analytics data collection, please follow the instructions at: https://tools.google.com/dlpage/gaoptout
5. International data transfers
Some of the third-party providers identified in this Policy may process data outside the European Economic Area (EEA). Users can obtain more information about any international transfers carried out by these third parties in their respective privacy policies, accessible via the links in Section 8.
6. Retention periods
The retention period for each cookie is indicated in the cookie table in Section 8. Session cookies are deleted when you close your browser. Persistent cookies remain on your device until their expiry date or until you delete them manually.
7. More information about personal data processing
For cookies placed directly by Mediasmart, users can obtain more information about personal data processing in our Privacy Policy, available at: https://www.mediasmart.io/privacy For third-party cookies, users can obtain more information about the processing carried out through their respective privacy policies, accessible via the links provided in Section 8.
8. Cookie list
8.1 Strictly necessary cookies
These cookies are essential for the Website to function. They do not require consent and cannot be disabled.
| Cookie | Provider | Purpose | Duration | Legal Basis |
|---|---|---|---|---|
| XSRF-TOKEN | Mediasmart (Laravel) | Prevents Cross-Site Request Forgery (CSRF) attacks | 2 hours | Legitimate interest |
| laravel_session | Mediasmart (Laravel) | Manages user session on the website | 2 hours | Legitimate interest |
| __cfruid | Cloudflare | Security — identifies trusted web traffic | Session | Legitimate interest |
| __cfuvid | Cloudflare | Security — rate limiting and abuse prevention | Session | Legitimate interest |
| __cf_bm | Cloudflare | Bot management — distinguishes humans from automated traffic | 30 minutes | Legitimate interest |
8.2 Analytical / performance cookies
These cookies help us understand how visitors interact with the Website. They are only placed with your consent.
| Cookie | Provider | Purpose | Duration | Legal Basis |
|---|---|---|---|---|
| _ga | Google Analytics | Distinguishes users for analytics reporting | 2 years | Consent |
| _gid | Google Analytics | Distinguishes users for analytics reporting | 1 day | Consent |
| _gat_UA-94125045-1 | Google Analytics | Throttles request rate to Google Analytics | Session | Consent |
For more information about Google Analytics cookies, please visit: https://business.safety.google/adscookies/
8.3 Functional and analytical cookies — HubSpot
Mediasmart uses HubSpot for website messaging, marketing communications, and analytics. HubSpot places the following cookies on the Website:
Messaging cookies:
| Cookie | Provider | Purpose | Duration | Legal Basis |
|---|---|---|---|---|
| hs-messages-is-open | HubSpot | Stores whether the chat widget is open | 30 minutes | Consent |
| hs-messages-hide-welcome-message | HubSpot | Prevents the welcome message from appearing again | 1 day | Consent |
| messagesUtk | HubSpot | Identifies users for chat messaging history | 182 days | Consent |
Preference and opt-out cookies:
| Cookie | Provider | Purpose | Duration | Legal Basis |
|---|---|---|---|---|
| __hs_opt_out | HubSpot | Stores the user’s cookie opt-out preference | 182 days | Legitimate interest |
| __hs_do_not_track | HubSpot | Stores the user’s do-not-track preference | 182 days | Legitimate interest |
| __hs_initial_opt_in | HubSpot | Records initial cookie consent state | 7 days | Legitimate interest |
| __hs_cookie_cat_pref | HubSpot | Stores cookie category preferences | 182 days | Legitimate interest |
| __hs_gpc_banner_dismiss | HubSpot | Records dismissal of GPC consent banner | 180 days | Legitimate interest |
| hs_langswitcher_choice | HubSpot | Stores the user’s language preference | 2 years | Legitimate interest |
Analytics and tracking cookies:
| Cookie | Provider | Purpose | Duration | Legal Basis |
|---|---|---|---|---|
| __hstc | HubSpot | Main cookie for visitor tracking across sessions | 182 days | Consent |
| hubspotutk | HubSpot | Tracks visitor identity for analytics and form submissions | 182 days | Consent |
| __hssc | HubSpot | Tracks sessions for analytics purposes | 30 minutes | Consent |
| __hssrc | HubSpot | Determines if the user has restarted their browser | Session | Consent |
| hs_ab_test | HubSpot | A/B testing — tracks which variant a visitor sees | Session | Consent |
| <id>_key | HubSpot | Authenticates members accessing gated content | 14 days | Consent |
| __hsmem | HubSpot | Identifies members for gated content access | 7 days | Consent |
| hs-membership-csrf | HubSpot | Prevents CSRF attacks on membership forms | Session | Legitimate interest |
For more information about HubSpot cookies, please visit: https://knowledge.hubspot.com/privacy-and-consent/what-cookies-does-hubspot-set-in-a-visitor-s-browser
9. Updates to this Policy
Mediasmart keeps this Cookie Policy under regular review. Any significant changes will be communicated to users through the Website. The date of the last update is indicated at the top of this document.
10. Contact
If you have any questions about this Cookie Policy, please contact us at: legal@mediasmart.io