Cookie Policy
Last updated: May 2026
This Cookie Policy explains how HostMasters Costa Tropical S.L. uses cookies and similar technologies on hostmasters.es. It is a complement to our Privacy Policy.
1. What are cookies?
Cookies are small text files stored on your device when you visit a website. They are widely used to make websites work, improve experience, and provide measurement. Similar technologies include localStorage, sessionStorage, and pixels.
2. Categories we use
Essential cookies (always on)
Required for the platform to function. They cannot be disabled.
| Cookie | Purpose | Duration |
|---|---|---|
| next-auth.session-token / __Secure-next-auth.session-token | Authenticated session (JWT) | 30 days |
| next-auth.csrf-token / __Host-next-auth.csrf-token | CSRF protection | Session |
| next-auth.callback-url / __Secure-next-auth.callback-url | Post-login redirect | Session |
| hm_locale | Interface language preference | 1 year |
| hm_cookie_consent | Records your cookie choice | 1 year |
| hm_partner_token | Partner portal authentication | 30 days |
| hm_ref | Partner referral attribution (signup) | 30 days |
Analytics cookies (consent required)
Only set if you accept "All cookies" in the banner.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_* | Google Analytics 4 | Aggregated usage analytics, IP anonymised | 2 years |
Marketing cookies (consent required)
Only set if you accept "All cookies". Used for measuring ad campaign performance.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _fbp | Meta (Facebook) Pixel | Campaign attribution | 3 months |
3. Your choices
- Manage in-app: click Cookie settings in the footer or banner at any time to change your consent.
- Browser controls: all major browsers let you block or delete cookies. Note that blocking essential cookies will prevent login.
- Withdraw consent: clearing the
hm_cookie_consentcookie re-prompts the banner.
4. Third-party processors
Analytics and marketing cookies are set by external providers (Google, Meta) located in the United States. Transfers are covered by Standard Contractual Clauses. See the full list of processors in our Privacy Policy §4.
5. Do Not Track
We honour the Global Privacy Control (GPC) signal where supported and treat "Do Not Track" as a request to load only essential cookies.
6. Changes
We may update this policy when we add or remove cookies. Material changes will be announced via the cookie banner.
7. Contact
Questions about cookies or privacy: privacy@hostmasters.es. You may also file a complaint with the Spanish Data Protection Authority (AEPD).