// Legal

Cookie Policy

Effective date · 2 November 2026

What changes

  • Sign-in cookies. We add the three technical sign-in cookies: two are set when you visit the website (form protection and return page) and the session cookie only when you sign in to the panel, lasting 24 hours.
  • Two-step verification. We add the technical cookie that stores your recovery codes, encrypted, for 10 minutes while you turn it on.
  • Your banner choice. We explain that it is stored in your browser’s local storage.
  • Language. We explain that on your first visit we choose it based on your country, and that you can change it with the language selector.
  • Out with what we do not use. We remove the “__vercel_*” cookies and the mention of tracking pixels, which are not used on the website.
  • Analytics. We specify that Vercel Analytics counts visits (pages, country and device) and that, according to Vercel, it does not use cookies.
  • Campaign measurement. We specify that the ph_attr cookie also stores the campaign name, that we link it to your account when you sign in or place an order, what we send to Google, that we remove the link after 90 days and that we delete it when you withdraw consent.

This policy explains which cookies and similar technologies we use on pulsarhost.es, for what purpose and how you can manage them.

1. What are cookies?

Cookies are small files that a website stores on your device to remember information (preferences, session state, etc.). We also use similar technologies such as localStorage, which are likewise governed by Article 22 of Law 34/2002 on Information Society Services and Electronic Commerce (LSSI). All the cookies described in this policy are first-party cookies set by pulsarhost.es.

2. Cookies we use

Technical cookies (always on)

Necessary for the website to function. They do not require consent (Art. 22.2 LSSI).

  • NEXT_LOCALE · Remembers your language: on your first visit, we set it based on your country, and you can change it with the language selector. Persistent, 1 year.
  • __Host-authjs.csrf-token · Protects sign-in against forged requests from other websites (CSRF). It is created when you visit the website, even if you do not sign in. Session: deleted when you close your browser.
  • __Secure-authjs.callback-url · Remembers which page to return to after you sign in. It is created when you visit the website, even if you do not sign in. Session: deleted when you close your browser.
  • __Secure-authjs.session-token · Keeps you signed in to the customer panel. It exists only after you sign in. It lasts 24 hours. If it grows too large, it is split into several cookies with the same name followed by .0, .1…
  • pulsarhost_2fa_codes · Stores your recovery codes, encrypted, while you enable two-step verification, so that we can show them to you in the last step. It lasts 10 minutes.
  • pulsarhost-cookie-consent (localStorage) · Stores your choice in the cookie banner so that we do not ask you again. It stays in your browser until you change your choice or clear the website's data.

Analytics (optional)

Analytics helps us understand how the website is used so that we can improve it. It is enabled only if you accept it. We only see aggregated data.

  • Vercel Analytics · A service provided by Vercel Inc. (USA). It counts visits (page views, country, device). According to Vercel, it does not use cookies or identify visitors. Vercel's privacy policy.

Campaign measurement (optional)

When we advertise PulsarHost on search engines, we need to know which ad brought each customer so that we do not spend money on campaigns that do not work. These cookies are enabled only if you consent to this specific purpose.

  • ph_attr · Stores the identifier that Google adds to the URL when you click one of our ads (gclid, gbraid or wbraid), together with the landing page, the date and the campaign name. Persistent, 90 days — the Google Ads conversion window.

We do not use it to build a profile of you or to follow you across other websites. If you later sign in, place an order or ask us for a quote, we link it to your email address and your account so that we know which ad resulted in a sale. If you place an order, we send Google that identifier together with the amount and the reference of each charge (the order and the renewals within those 90 days), and we let it know if there is a refund; Google processes it under its own privacy policy. We remove the identifier and the link to your account 90 days after the click. If you withdraw your consent, we delete the cookie and, if you are signed in, the data stored under your name as well.

We do not use cross-site tracking cookies, third-party advertising networks or profiling for commercial purposes. We do not sell data to third parties.

3. How can you manage your cookies?

The banner that appears the first time you visit lets you accept everything, keep only the essential cookies, or choose by purpose. You can change your choice at any time using the link in the footer, and withdrawing your consent is as easy as giving it.

In addition, you can block or delete all cookies in your browser settings:

If you block technical cookies, some features of the website may be affected.

4. More information

If you have any questions about cookies or privacy, write to us at private@pulsarhost.es.

For more information about your rights, see our Privacy Policy.