What cookies are
Cookies are small files that a website stores in your browser to remember information from one page to the next. This policy explains which cookies and similar technologies the aspimenu.com website (the “Website”) uses, why and for how long.
Cookies used by the Website
We only use technical cookies, which are necessary for the Website to work and to be secure. That is why they do not require your consent (Article 22(2) of the LSSI, Spanish Law 34/2002 on information society services and electronic commerce) and we do not show you a banner asking you to accept them:
- __Host-am_s: keeps you logged in. It lasts until you close your browser (and for no more than 24 hours) or, if you choose “Remember me”, 30 days. HttpOnly.
- am_in: only indicates that a session is active, so that the page knows whether it needs to load your account data. It does not contain any of your data. It lasts as long as the previous cookie.
- __Host-am_d: a random device identifier, used to protect the store against fraud and to prevent blocks from being circumvented by switching accounts. 2 years. HttpOnly.
- __Host-am_dc: protects the linking of your account to Discord against forged requests. 10 minutes. HttpOnly.
- __Host-am_a: the internal panel session; only members of the ASPI team receive it. 12 hours. HttpOnly.
All of them are the Website’s own first-party cookies: they are only sent over secure connections, and no other domain can read or modify them.
Browser storage
The Website also stores, in your browser’s session storage (sessionStorage), your username, so that it can be shown in the header right away; your position on the page, so that you return to the same point when you go back; and, while you fill in an order, the details you type and the boxes you tick, so that they aren’t lost if you reload the page. This data is deleted when you close the tab and never leaves your browser.
And, only if you choose a currency for the approximate prices or turn them off, it stores that choice in your browser’s local storage (localStorage, am-fx-currency), so that it is remembered on your next visits. It stores nothing else, it stays until you change it or clear the site’s data, and it never leaves your browser either.
Third-party cookies
- Cloudflare protects the Website against bots and attacks and may set its own security cookies (such as __cf_bm or cf_clearance). Its anti-bot check, Turnstile, is loaded on registration, login, email codes, payment, key redemption and the internal panel.
- Stripe loads the card form on your order’s payment page and sets its own cookies to prevent fraud (such as __stripe_mid and __stripe_sid). Where available, the Apple Pay and Google Pay buttons load components from Apple and Google. If you choose another method in the form (such as Klarna or Amazon Pay), its provider’s page may open, with its own cookies.
- PayPal, NOWPayments and Discord are only involved when you go to their pages, to pay or to link your account, and their own cookie policies apply there.
These cookies are necessary for security or for the payment you request, and they are managed by those providers under their own policies.
Cookie-free analytics
We measure visits with our own system, which does not use cookies or store anything on your device. What data it processes and for how long is explained in the Privacy Policy (section 3).
We do not use advertising, profiling or cross-site tracking cookies. If we ever did, we would ask for your consent first.
How to manage or delete cookies
You can view, block or delete cookies in your browser settings (Chrome, Firefox, Safari, Edge…). If you block technical cookies, you will not be able to log in or make purchases.
Changes to this policy
If we change the cookies we use, we will update this policy and its date.