Cookie policy
Last updated: 30 September 2026
1. What they are and who sets them
A cookie is a small file a website stores in your browser. The browser's local and session storage do a similar job without being cookies. This policy covers both on audiomap.ai and app.audiomap.ai.
The controller is CODELABS STUDIO, S.L. (CIF B88708797), with registered office at Pasaje Federico García Lorca, 6, 3º E, 29130 Alhaurín de la Torre (Málaga), Spain, registered with the Companies Registry of Málaga (Registro Mercantil de Málaga), sheet MA-198508, entry 1. Contact: privacidad@audiomap.ai.
2. Strictly necessary cookies
The service does not work without them, so they do not require consent (article 22.2 LSSI-CE). All of them are first-party.
- authjs.session-token (with the __Secure- prefix in production): keeps you signed in on audiomap.ai and app.audiomap.ai. Lasts up to 30 days.
- authjs.csrf-token: protects the sign-in form against forged requests. Deleted when you close the browser.
- authjs.callback-url: takes you back to the page you were on after signing in. Deleted when you close the browser.
- NEXT_LOCALE: remembers the language you choose. Deleted when you close the browser.
- cl_consent: stores your choice in the cookie banner so the server respects it. Lasts 180 days.
- am_creator: only set for internal CODELABS STUDIO, S.L. team accounts for administration tools; never set for visitors or customers. Lasts 30 days.
3. Cookieless analytics
We measure traffic with Plausible Analytics, hosted in the European Union. It uses no cookies and identifies no one. Even so, if you click Reject in the banner it stops loading, and to keep it from measuring again we store the plausible_ignore flag in your browser.
4. Marketing cookies (only with your consent)
They are set only if you accept marketing cookies in the banner:
- _fbp and, if you arrive from an ad, _fbc: Meta pixel cookies (Meta Platforms Ireland Ltd.) that measure whether our Facebook and Instagram ads lead to a sign-up or a purchase. They last 90 days. Meta may transfer this data outside the European Union under the EU-US Data Privacy Framework; see Meta's cookie policy.
- cl_attr: first-party cookie that stores which campaign you came from (for example an ad click identifier) so we know which ad brought each sign-up. Lasts 90 days.
- partner_ref: first-party cookie of the Codelabs Studio, S.L. partner programme. It stores which partner referred you to AudioMap (the ref parameter of the link) so the commission can be attributed if you sign up or pay. It is an affiliate cookie, in the marketing category, and is only set if you accept marketing cookies. It lasts 90 days. Without your consent nothing is stored in your browser: the identifier travels in the link and we send it when you sign up or pay.
- Support chat by AgenteUno (a CODELABS STUDIO, S.L. product hosted in Germany): stores a conversation identifier in session storage (au_sid_), deleted when you close the tab, and sends usage statistics about the chat itself.
5. Other data stored in your browser
The site keeps data in local storage that never leaves your browser and only makes the interface work the way you left it: your banner choice (audiomap.cookie-consent), whether you have seen the welcome tour, whether you dismissed the install-the-app prompt, collapsed panels or their width, and your notification preference. It also stores flags that prevent the same sign-up or purchase from being counted twice in ad measurement. You can clear all of it from your browser settings.
6. How to accept, reject or withdraw consent
On your first visit we show a banner with two equally weighted options: accept or reject. You can change your mind at any time from the Cookie preferences link in the footer, which reopens the banner. You can also delete this site's cookies from your browser. Rejecting or withdrawing consent changes nothing about the service.
More about how we process your data in the privacy policy, and about the site owner in the legal notice.
7. Governing law and jurisdiction
This policy is governed by Spanish law. If you are a business or professional, the parties submit to the courts of Málaga (Spain), waiving any other forum; if you are a consumer, the courts determined by mandatory law will have jurisdiction (generally those of your place of residence) and, where the law allows, also those of Málaga. You may complain to the Spanish Data Protection Agency: www.aepd.es.