Legal information

Cookies and browser storage

Essential storage, consent-controlled Google Analytics measurement and how to change or withdraw your choice.

OAXWAY uses essential security and interface storage. Google Analytics 4 is available for audience measurement but must not load or write analytics cookies until the visitor accepts the analytics category. No advertising identifier is currently configured.

Technologies in use

Google Analytics 4 is configured with measurement ID G-9DHLYMMCZ3 and is controlled by the consent system. It is not used for advertising personalization.

No advertising pixel is configured. There is currently no Google Ads conversion ID, Meta pixel or TikTok pixel in the consent catalog.

No third-party social widgets are required for public pages, and fonts are served locally rather than fetched from Google Fonts.

Essential storage

  • `__cf_bm` — cookie. Cloudflare security cookie used to distinguish legitimate visitors from automated abuse; it is short-lived and not readable by site JavaScript.
  • `tsr-scroll-restoration` — session storage. Restores the previous scroll position and disappears when the tab session ends.
  • `oaxway.consentimiento.v1` — local storage. Records which consent categories were shown, which were accepted and the date, so the website can respect the visitor's choice.
  • Authentication session — local storage. Created only for authorized administration or operator-panel users, never merely by browsing public pages.

How consent works

Google consent mode starts with analytics and advertising storage denied. The analytics script is loaded only when the analytics category is accepted. Rejecting is offered alongside accepting, and the choice can be changed from Cookie preferences in the footer. If a new category such as advertising is added later, visitors who only decided about analytics must be asked again.

Analytics cookies after acceptance

  • `_ga` distinguishes one browser from another for measurement and normally expires after two years.
  • `_ga_` followed by the property identifier maintains analytics session state and normally expires after two years.
  • These cookies are not written when analytics consent is denied.

Browser controls

Cookies and site storage can also be removed or blocked in browser privacy settings. Blocking Cloudflare security storage may trigger additional verification. Blocking local storage prevents authenticated panel access but should not prevent ordinary use of public pages.