2. What this site uses
This site does not set first-party cookies. It uses only the following technologies:
- Consent record (first-party, local storage, technical): the key “metlabs:cookie-consent” stores the choice you make in the banner (accepted categories, version and date) so we do not ask you again. It expires after 6 months. It is necessary to respect your decision and is exempt from consent.
- Web performance measurement (Vercel Speed Insights, third-party, analytics category): it only loads on the published site and if you accept the analytics category. It does not use cookies or store your IP address: it sends loading speed metrics (Web Vitals) together with the route visited, device type, browser, operating system, network speed and country. The data is anonymous and does not allow your browsing to be reconstructed (vercel.com/legal/privacy-policy).
- Usage analytics (PostHog, third-party, analytics category): it only loads if you accept the analytics category. It stores a random identifier in your browser (cookie and local storage prefixed “ph_”, up to 1 year) to tell visits apart, and records the pages you view, clicks, interaction with the form and a session recording in which what you type is masked. If you submit the contact form, we link that browsing to your request. With your consent it also stores, for 90 days, the page you entered through and the website that brought you here (key “metlabs:attribution”). Data is hosted in the European Union (posthog.com/privacy).
- Browsing analytics (Google Analytics 4, third-party, analytics category): it only loads if you accept the analytics category. It measures page views, submitted enquiries and clicks on contact channels and booking links. It uses “_ga” and “_ga_*” cookies, configured to last up to one year from your latest visit. We do not send form contents or URL query parameters or fragments. We do not enable Google Signals or advertising personalisation (policies.google.com/privacy).
- Advertising conversion measurement (Google Ads, third-party, marketing category): it only loads on the published site and if you accept the marketing category. If you arrive from one of our Google ads, the Google tag stores the identifier of that click in your browser (“_gcl_au” and “_gcl_aw” cookies, up to 90 days) and tells Google whether you then messaged us on WhatsApp or submitted the contact form, so we know which campaigns work. We do not use it to show you personalised advertising or for remarketing, and it does not send Google what you type in the form (policies.google.com/privacy).
- Embedded map (Google Maps, third-party): the pages showing the location of our offices display a static image of the map and only load the Google map if you click “View interactive map”. From then on, Google may store its own cookies in your browser in accordance with its policy (policies.google.com/privacy).
3. What it does not use
The site language is determined by the URL (Spanish at the root and English under /en/), without cookies. We do not use preference cookies, nor cookies for personalised advertising or remarketing. The preference category exists in the settings panel so that, if we add a new tool, it is not activated without your consent. If that happens, we will update this Policy and ask for your consent again.
4. Categories in the settings panel
- Strictly necessary: essential for the site to work and to remember your cookie choice. They do not require consent and cannot be disabled.
- Preferences: would remember choices such as language or display mode. None is used today.
- Analytics: site performance measurement (Vercel Speed Insights), browsing and enquiries (Google Analytics 4), and usage analytics with session recording (PostHog).
- Marketing: conversion measurement for our Google Ads campaigns. It is not used for personalised advertising or remarketing.
5. Managing your consent
When you enter the site, a banner is displayed with three options: accept all, necessary only, or configure by category. Your choice is stored for 6 months; after that period, or if we change the technologies used, we will ask you again. You can at any time from this link or from the site footer. Withdrawing consent is as easy as giving it and does not affect your browsing.
If you reject analytics, the measurement tools are not loaded. If you accept them and later reject them, they stop sending data from that moment and the visit identifier is forgotten. The same applies to conversion measurement if you reject marketing.
7. International transfers
Vercel Inc., Google LLC and PostHog Inc. are established in the United States; PostHog hosts this site's data in the European Union. Transfers are covered by a European Commission adequacy decision (the EU-US Data Privacy Framework, where the provider is certified) or by the Standard Contractual Clauses approved by the Commission. You can request more information by emailing privacy@metlabs.io.
8. Changes to this Policy
This Policy may be updated to reflect regulatory changes or changes in the technologies used. The version in force is always the one published on this page, with the date of its last review.
9. Contact
If you have any questions about the use of cookies or about the exercise of your rights in relation to them, write to us at privacy@metlabs.io. The rest of the information about the processing of your data is in the Privacy Policy.
If any clause of this document is declared null or unenforceable, the remaining clauses will stay in force. This document is published in Spanish and in English; in the event of any discrepancy between the two versions, the Spanish version prevails.
