Cookie Summary

Nōmae uses technologies necessary for its websites and applications to function securely and, only when the user consents, analytics or advertising technologies.

Non-essential categories remain disabled by default. The options to accept, reject, and configure must be presented clearly and equally, and continuing to browse does not imply consent.

1. Data Controller and Scope

The data controller for the technologies used for its own purposes is:

• DataController: Miguel Angelo Romo Rodríguez

• Trade Name: Nōmae

• Address: Calle de San Benito, 31, Block 2A

• Privacy: legal@gonomae.com

This Policy applies to gonomae.com, app.gonomae.com, Atlas, portals, public and authenticated routes, and other digital services identified under Nōmae, hereinafter referred to as the “Sites.”

2. What Are Cookies and Similar Technologies

We use the term “cookies” in a broad sense to refer to cookies, local storage, pixels, tags, identifiers, service workers, and other mechanisms capable of storing or retrieving information from the device. These technologies may be necessary to provide the service, maintain a session, preserve preferences, or protect the platform. Others may be used, with consent, to measure usage or attribute campaigns.

3. Categories and Purpose

Essential technologies are used for authentication, security, session management, essential preferences, PWA functionality, fraud prevention, and recording privacy choices. They do not require consent when strictly necessary to provide the requested service or to carry out communication.

Preference technologies allow us to remember options or customize non-essential features. They require consent when not covered by the applicable exception. Analytics technologies are used to measure navigation, performance, events, and usage of the Sites. They require consent and remain blocked until accepted. Advertising and measurement technologies enable campaign attribution, conversion tracking, audience creation, and, where applicable, ad personalization. They require consent and remain blocked until accepted.

4. Planned Technologies

The following list reflects the planned configuration and must be verified against the production environment before publishing the final version of the technical inventory. The consent preference—whose specific name will depend on the CMP used—may be managed by Nōmae or by the corresponding CMP. Its purpose is to store and verify the categories that have been accepted or rejected. It is considered a necessary technology, and its estimated duration will be up to 24 months.

Session, authentication, and security technologies—whose names may vary depending on the implementation—can be managed by Nōmae or by its technical infrastructure. They are used to maintain the session, protect access, and prevent abuse. They are classified as “necessary,” and their duration will be the length of the session or the configured technical timeframe. Local storage, the cache, and service workers are Nōmae technologies used for performance, installation, limited offline functionality, and requested preferences. Their category may be “necessary” or “preferences,” depending on the specific purpose. Their approximate duration will be until they are deleted, expire, or are replaced by a new version.

The _ga cookie, from Google Analytics, is used to distinguish visitors and generate usage statistics. It belongs to the analytics category, and its approximate duration can be up to 2 years, depending on the configuration. The ga<ID> cookie, from Google Analytics, is used to maintain session status and measure interactions. It belongs to the analytics category, and its approximate duration can be up to 2 years, depending on the settings. The _fbp, _fbc, and other Meta identifiers are used for measurement, attribution, and advertising. They belong to the advertising category, and their duration is typically up to 3 months or as determined by the applicable settings. This list will be updated when a technical scan detects additional technologies, when names or durations change, or when new providers or purposes are added.

5. How We Manage Consent

On your first visit, you will be offered options to Accept, Reject, or Configure non-essential categories. The “Accept” and “Reject” options will be displayed with equal prominence.

Analytics, Advertising, and other optional categories will remain disabled by default until a valid choice is made. Closing the banner or continuing to browse will not be interpreted as consent. The choice may be retained for up to 24 months, unless the purposes or third parties change significantly, it becomes necessary to request consent again, or the user withdraws consent earlier.

When technically possible, the preference will be applied consistently to both domains. Browser or device limitations may require that the choice be maintained separately.

6. How to Change or Withdraw Consent

You may change or withdraw your preference at any time by using the permanent “Manage Cookies” link available at the bottom of the Sites.

Withdrawal will prevent future use of the rejected categories and will not affect the lawfulness of prior processing. Cookies or data already stored may also be deleted from the browser or device.

7. Authenticated Areas, PWAs, and Host Data

Authenticated areas and PWAs may use sessions, local storage, cache, or service workers for security, authentication, performance, and requested features. The mere presence of a technology within an authenticated area does not automatically make it necessary; its classification depends on its purpose. Analytics and advertising technologies remain subject to consent. Advertising identifiers must not be combined with guest profile data, stay information, or preferences unless there is specific information and a valid legal basis.

8. Third Parties and International Transfers

When enabled, Google Analytics 4 and Meta Pixel may involve processing by Google and Meta. These third parties may act as processors and, for certain operations of their own, as independent controllers. Some processing activities may involve transfers outside the European Economic Area. Where applicable, valid mechanisms in accordance with the GDPR will be used. You can review Google’s and Meta’s privacy policies.

9. Browser Settings

Browsers allow you to block, limit, or delete cookies. Disabling cookies across the board may also affect necessary technologies and cause certain features to not function properly. You can review the instructions for Chrome, Firefox, Safari, and Edge.

10. Changes and Contact

We may update this Policy as technologies, providers, purposes, settings, or regulations change. If a change affects a previous choice you’ve made, we’ll ask for a new decision when appropriate. For questions about cookies or privacy: legal@gonomae.com