Cookie Policy
Last updated: April 18, 2026
1. What are cookies?
Cookies are small files stored in your browser when you visit a website. They remember your preferences, keep you logged in, and collect aggregated usage statistics.
Expato uses first-party and third-party cookies in accordance with Article 22.2 of Spanish Law 34/2002 (LSSI-CE) and Regulation (EU) 2016/679 (GDPR).
2. Types of cookies we use
Strictly necessary cookies (no consent required)
Essential for the Site to work. Without them you cannot browse or use basic services.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
sb-access-token, sb-refresh-token | Supabase | Keep your session logged in | Session + 7 days |
NEXT_LOCALE | Expato (first-party) | Remember selected language | 1 year |
expato_cookie_consent | Expato (first-party) | Store your cookie choice | 1 year |
| Stripe cookies | Stripe | Payment fraud prevention | Session |
Analytics cookies (require consent)
Help us understand how the Site is used so we can improve it. Only active if you accept.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_vercel_analytics_* | Vercel | Aggregated, anonymous performance and traffic metrics | Session |
In the future we may add PostHog or Google Analytics, with prior notice and update to this policy.
3. How to manage cookies
When you first visit the Site, you'll see a banner where you can:
- Accept all — allow essential and analytics cookies
- Essentials only — only strictly necessary cookies
- Configure — choose which categories to accept
You can change your choice at any time by deleting the expato_cookie_consent cookie from your browser, or by using the cookie preferences link in the footer when available.
Browser configuration
All browsers let you manage cookies in their settings:
- Chrome: Settings → Privacy and security → Cookies
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Cookies and website data
- Edge: Settings → Cookies and site permissions
Important: if you disable strictly necessary cookies, parts of the Site (authentication, payments) will not work.
4. Third-party cookies
Some third-party services we use may set their own cookies:
- Stripe — for payment fraud prevention (Stripe privacy policy)
- Vercel — for hosting and aggregated analytics (Vercel privacy policy)
- Supabase — for authentication (Supabase privacy policy)
We do not use advertising or social media cookies.
5. International transfers
Some providers (Vercel, Stripe where applicable) may process cookie data outside the EEA, covered by Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR).
6. Changes
We will update this policy when the cookies we use change. The last update date appears at the top.
7. More information
For general personal data processing details, see the Privacy Policy.
Contact: oleh@veheria.tech
Last updated: 18 April 2026.