Cookie Policy
Last updated: October 17, 2026
This policy explains which cookies and similar technologies are used on the shamusic.es website and the open.shamusic.es platform (collectively, “the websites”), what they are used for, who sets them, how long they last, and how you can accept or reject them or change your selection at any time.
The entity responsible for these websites is Shamusic Discoveries S.L. (Tax ID No. B56411200, Calle Almansa 98, Bajo C, 28040 Madrid; info@shamusic.es). To learn how we process your personal data in general, please see our Privacy Policy: https://shamusic.es/politica-de-privacidad/
1. What Are Cookies and Similar Technologies?
A cookie is a small file that a website stores in your browser or on your device and can read during subsequent visits. This policy also covers other technologies that work in a similar way: browser local storage (localStorage), identifiers included in links (for example, the gclid parameter added by Google Ads when you click on an ad), and pixels or tags that send information to a server when a page or email is loaded.
Depending on who manages them, they are:
- First-party: These are installed by our domain (shamusic.es or open.shamusic.es).
- From third parties: They are installed or read by another company, such as Google, Microsoft, or Stripe.
Depending on their duration, they are:
- Session cookies: These are deleted when you close your browser.
- Persistent: These cookies remain on your device for the period indicated in the table or until you delete them.
2. What types of cookies do we use, and on what legal basis?
| Category | Name on shamusic.es (Borlabs) | Name on open.shamusic.es | Does this require your consent? |
| Technical or necessary cookies: they make the website work, remember your cookie preferences, keep you logged in, enable secure payments, and prevent fraud | Essentials | Techniques | No. They are exempt under Article 22.2 of the LSSI because they are strictly necessary for the service you are requesting. |
| Analytics or measurement: These tools tell us how many people visit our sites, how they use them, and what isn’t working, so we can improve them | Statistics | Analytics | Yes. They are only enabled if you accept them. |
| Advertising or marketing: These track whether a Google ad results in a sign-up or a payment, and allow you to optimize or customize your ads | Marketing | Marketing | Yes. They are only activated if you accept them. |
The legal basis for analytical and marketing cookies is your consent (Article 22.2 of Law 34/2002 on Information Society Services and Electronic Commerce (LSSI) and Article 6.1.a of the General Data Protection Regulation (GDPR)). Technical cookies are based on the fact that they are necessary to provide you with the service you request and on our legitimate interest in ensuring that our websites are secure.
Both prompts have “Accept,” “Reject,” and “Configure” buttons that are equally visible. Rejecting is just as easy as accepting. If you don’t select anything, no analytics or advertising cookies will be installed.
3. Google Consent Mode v2 (Google Consent Mode)
We use Google Consent Mode v2. Until you make a selection, the four permissions that Google requests (analytics_storage, ad_storage, ad_user_data, and ad_personalization) are denied by default. When you make a selection in the notification, those permissions are updated:
- If you accept analytics (Statistics), analytics_storage is enabled: Google Analytics can use cookies. Microsoft Clarity is also loaded on the platform.
- If you accept the marketing terms, ad_storage, ad_user_data, and ad_personalization are permitted: Google Ads may use cookies, receive data to track conversions, and personalize ads.
We use the advanced setting of Consent Mode. In this mode, even if you do not consent, Google tags may send signals to Google without cookies or persistent identifiers: the event type, time, page, and technical browser data. Google uses this data in aggregate form to estimate conversions (what it calls “modeling”). On open.shamusic.es, ad data redaction (ads_data_redaction) is also enabled.
If you want to know how Google uses information from websites that use its services, visit: https://policies.google.com/technologies/partner-sites?hl=es
4. Cookies We Use, by Provider
The durations are standard, as specified in each provider’s documentation and the Borlabs Cookie configuration. They may change if the provider updates its service.
4.1. Shamusic Discoveries S.L. (in-house, technical)
| Cookie or element | Web | Type | Purpose | Duration |
| borlabs-cookie | shamusic.es | First-party, technical cookie | Saves which groups and services you have accepted or rejected in the Borlabs notice, so you won’t be asked again and your choice is respected. | 183 days |
| cookieConsent | open.shamusic.es | First-party, technical localStorage | Saves your selection in the platform’s notice (technical, analytics, and marketing cookies) and the date you made it. | 12 months (after which we’ll ask you again) |
| acceptCookies | open.shamusic.es | First-party localStorage, technical | Selection made in the platform’s previous notice. It is used only to preserve that selection when switching to the new notice. | Until it is replaced by cookieConsent |
| token, tokenExpiration, accessExpiration, userId, userAvatar | open.shamusic.es | First-party localStorage, technical | These keep you logged in and display your profile while you use the platform. | Until you log out or the session expires |
| Attribution data (gclid and utm_source, utm_medium, utm_campaign, utm_term, utm_content) | open.shamusic.es | First-party localStorage, marketing | Recuerda de qué anuncio o campaña vienes para asociarlo a tu registro y a tus pagos. This information is only saved if you accept marketing cookies. Si no, se mantiene en memoria mientras la página está abierta y no se asocia a tu cuenta. | 90 days. It’s deleted if you opt out of marketing. |
The platform also tracks how many times the notification is displayed and which option is selected. It does this without cookies and without collecting any personal data: it only saves daily totals.
WordPress session cookies only affect users who log in to the shamusic.es admin panel; they do not affect visitors.
4.2. Google (Google Tag Manager, Google Analytics 4, and Google Ads)
Provider: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), in conjunction with Google LLC (U.S.). Information: https://policies.google.com/technologies/cookies?hl=es · Privacy: https://policies.google.com/privacy?hl=es
Identifiers we use: Tag Manager container GTM-5DLFM23S; Google Analytics 4 G-BTKXRL8YMC (“Web Shamusic” stream, for shamusic.es and open.shamusic.es); Google Ads AW-17487119674.
| Cookie | Service | Category | Purpose | Typical Duration |
| _ga | Google Analytics 4 | Analytics / Statistics | Distinguishes one browser from another using a random identifier to count users and visits. | 2 years |
| _ga_<ID> (for example, _ga_BTKXRL8YMC) | Google Analytics 4 | Analytics / Statistics | It saves your session status: when it starts, how many pages you view, and in what order. | 2 years |
| _dc_gtm_<ID> | Google Tag Manager / Analytics | Analytics / Statistics | Limit the frequency of requests to Google. | 1 minute |
| _gcl_au | Google Ads (Conversion Tracker) | Marketing | Stores an identifier to link your visits to ad clicks and measure conversions. | 90 days |
| _gcl_aw | Google Ads | Marketing | Save the Google ad click ID (gclid) to track whether that click resulted in a sign-up or a payment. | 90 days |
| _gcl_gb / _gac_gb_<ID> | Google Ads | Marketing | Variations on the above for measuring ad click-through conversions. | 90 days |
| IDE | Google Ads (doubleclick.net domain) | Third-party marketing | Displays ads, measures their performance, and prevents you from seeing the same ad repeatedly. | Up to 13 months in the EEA |
| test_cookie | Google Ads (doubleclick.net) | Marketing, third-party | Check if your browser accepts cookies. | 15 minutes |
| __gads, NID, 1P_JAR, AID, TAID, ANID, RUL, FPAU, FPGCLAW, FPGCLGB | Google Ads | Marketing | Other Google Ads cookies used for advertising, measurement, and security. They may appear on Google domains or on ours. | Between 2 weeks and 2 years, depending on the cookie |
None of these cookies will be installed if you do not accept the corresponding category. Google cookies on Google’s own domains (google.com, doubleclick.net) are also governed by Google’s policy.
Sign in with Google. If you select “Continue with Google” during registration or when logging in to the platform, the Google identity service (accounts.google.com) will load. Google may read or set cookies on its domains to identify you, and on our domain, it may store the technical cookie `g_state`, which remembers whether you closed the login prompt. It is only used if you request it, so it is considered necessary for the service.
4.3. Microsoft Clarity (available only at open.shamusic.es)
Provider: Microsoft Corporation (U.S.). Privacy: https://privacy.microsoft.com/es-es/privacystatement
Clarity shows us, in aggregate form and using anonymized session recordings, how the platform is used: where users click, how far down the page they scroll, and what errors appear. We use it to detect issues on screens such as the plans or the construction project form. It will only load if you accept analytics cookies. Si después las retiras, la plataforma borra sus cookies.
| Cookie | Category | Purpose | Typical Duration |
| _clck | Analytics | Stores the Clarity user ID and preferences. | 1 year |
| _clsk | Analytics | Combines page views within the same session for recording. | 1 day |
| CLID (clarity.ms) | Analytics, third-party | Identifies the first time Clarity sees this browser. | 1 year |
| MUID (clarity.ms / bing.com) | Third-party analytics | Browser identifier used by Microsoft services. | 1 year |
| ANONCHK, SM | Third-party analytics | Microsoft internal controls. | Between the session and 10 minutes |
4.4. Stripe (payments and fraud prevention)
Provider: Stripe Payments Europe, Limited (Ireland), in conjunction with Stripe, Inc. (U.S.). Cookies: https://stripe.com/es/legal/cookies-policy · Privacy: https://stripe.com/es/privacy
Payments on the platform are processed through Stripe, either on Stripe’s payment page or via a Stripe form on our website. When that form is loaded, Stripe uses cookies to facilitate the payment and for its anti-fraud system (Stripe Radar). These are technical cookies: without them, you cannot make a secure payment.
| Cookie | Category | Purpose | Typical Duration |
| __stripe_mid | Technical (Security and Fraud Prevention) | Identifies the device to detect fraudulent payments. | 1 year |
| __stripe_sid | Technical (security and fraud prevention) | Identifies the payment session to detect fraud. | 30 minutes |
| Cookies on Stripe domains (m, __stripe_orig_props, among others) | Technical, third-party | Operation and security of the Stripe payment page. These are governed by Stripe’s cookie policy. | According to Stripe |
4.5. Email Marketing Tool
We use a mailing service provider based in the European Union. As far as we can tell, we do not install their tracking code or forms on our websites: the forms send the data to them from our server. Therefore, this provider does not install cookies on your browser when you visit our site.
The marketing emails we send may contain a tracking pixel and tracked links, so we can tell if an email is opened and which links are clicked. We only send marketing emails to those who have checked the box labeled “I want to receive news and promotions from Shamusic.” You can unsubscribe at any time using the link at the bottom of each email.
4.6. Other Services
- Meta (Facebook and Instagram) and TikTok: We do not use their pixels or ad tags on our websites.
- Social media: The Facebook, Instagram, and TikTok icons are simple links. They do not set cookies until you visit the social media site, which has its own privacy policy.
5. How to Accept, Reject, or Withdraw Your Consent
You can change your choice at any time, and withdrawing it is just as easy as making it:
- On shamusic.es: Click the “Cookie Preferences” icon or link, which is always visible. From there, you can enable or disable the “Statistics” and “Marketing” groups, or specific services, and view your consent history.
- On open.shamusic.es: Open the “Cookies” option in the menu (on desktop and mobile). From there, you can change the Analytics and Marketing categories.
Each website stores your choice separately, so we may ask you on both sites. If you withdraw your consent, we will stop using those cookies immediately: the platform will delete the Clarity cookies and attribution data, and Google will no longer be authorized to use them. Some third-party cookies that are already installed may remain in your browser until they expire or you delete them; to do so, follow the steps in section 6. Withdrawing your consent does not affect what happened before.
We will ask for your consent again when your selection expires (183 days on shamusic.es and 12 months on open.shamusic.es), or sooner if the cookies or their purposes change in a significant way.
6. How to Block or Delete Cookies from Your Browser
You can also block or delete cookies and local storage from your browser settings. If you block technical cookies, you may not be able to log in or make a payment.
- Google Chrome: Settings › Privacy and security › Third-party cookies / Clear browsing data. https://support.google.com/chrome/answer/95647?hl=es
- Mozilla Firefox: Settings › Privacy & Security › Cookies and Site Data. https://support.mozilla.org/es/kb/Borrar%20cookies
- Safari (Mac): Settings › Privacy › Manage Website Data. https://support.apple.com/es-es/guide/safari/sfri11471/mac
- Safari (iPhone and iPad): Settings › Apps › Safari › Advanced › Website Data. https://support.apple.com/es-es/105082
- Microsoft Edge: Settings › Privacy, search, and services › Cookies. https://support.microsoft.com/es-es/microsoft-edge
- Opera: Settings › Privacy and Security › Cookies. https://help.opera.com/es/latest/web-preferences/
Other tools:
- Google Analytics: opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=es
- Google Ad Personalization: https://adssettings.google.com
- Advertising preferences for various companies: https://www.youronlinechoices.eu/
7. International Transfers
Some providers, such as Google, Microsoft, and Stripe, may process data in the United States. These transfers are protected by theEU-U.S. Data Privacy Framework—under which they are certified—and by the European Commission’s Standard Contractual Clauses. You can find more information in the “Transfers” section of our Privacy Policy (https://shamusic.es/politica-de-privacidad/).
8. Your Rights
In addition to withdrawing your consent, you can exercise your rights of access, rectification, erasure, objection, restriction of processing, and data portability. To do so, please email us at info@shamusic.es. If you believe we have not properly addressed your request, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es). You can find all the details in the Privacy Policy (https://shamusic.es/politica-de-privacidad/).
9. Changes to This Policy
We will update this policy whenever the cookies we use or the regulations change. You will always see the date of the last update at the top. If the change is significant, we will ask for your consent again through the cookie notice.
