Cookies Policy
Last updated: 2 November 2026
This Policy explains which cookies and similar technologies HiDrago uses, with what purpose, and how you can manage them. It complies with article 22.2 of Spanish Law 34/2002 (LSSI-CE), the GDPR, and the guidelines of the Spanish Data Protection Agency.
1. What cookies are
Cookies are small text files that a website places on your browser to recognise you between visits, keep your session, remember preferences, or measure use of the service. Alongside cookies we sometimes use similar technologies such as browser localStorage.
2. Cookies we use
We use cookies and technical storage needed to provide the service, preference cookies and those used for our own usage measurement listed below (section 3). We do not use advertising or cross-site tracking cookies: HiDrago "Sponsored" ads are contextual and are shown without cookies. • drago_session — keeps your session signed in with Google. Expires after 30 days. Strictly necessary. • oauth_state, oauth_pkce — prevent CSRF attacks during sign-in. Expire in minutes. Strictly necessary. • NEXT_LOCALE — remembers your language. Expires after 12 months. Strictly necessary. • user_location_optin — records whether you have accepted or rejected sharing your location. Expires after 12 months. Preference. • font_scale — accessibility preference (font size). Expires after 12 months. Preference. • drago_onboarding_seen — remembers that you have already seen the welcome screen so we can take you straight into the app. Expires after 12 months. Preference. • drago_device_id — random identifier of this device. It lets you use HiDrago without an account (your profile, your conversation and, if you stay at a participating property, your stay); our own usage measurement described in section 3 is also linked to it. Expires after 180 days. • drago_auth_evt — for 5 minutes, remembers whether you have just created an account or signed in, so it can be counted in our own usage measurement. Measurement. • consent — remembers that you have seen the cookie notice so we do not show it on every visit. Expires after 12 months. Strictly necessary.
3. Usage measurement
To measure usage of the service we use Umami, a self-hosted analytics tool that does not install cookies and does not collect personal identifiers; its metrics are anonymous and aggregated. In addition, HiDrago records on its own servers how the app is used: screens visited, buttons, cards and links tapped, filters chosen, errors and loading times. These events are linked to the device identifier (drago_device_id) and, if you are signed in, to your account, so we can understand which journeys work and improve them. They never include what you type in searches or contact details, we do not share them with third parties and we do not use them for advertising or commercial profiling. They are kept for a maximum of 13 months. We do not use Google Analytics or similar services.
4. Third-party cookies
When you sign in with Google, cookies from the google.com domain are installed and managed exclusively by Google under its own policies (https://policies.google.com/privacy). HiDrago does not control those cookies. If you do not want Google to install cookies on your device, do not sign in with Google.
5. Consent and management
Strictly-necessary cookies are installed when you access the service because without them the site cannot work correctly, in accordance with article 22.2 LSSI-CE. Preference cookies are activated when you act (for example, when you accept sharing your location or change the font size). You can delete cookies at any time from your browser settings. Deleting the session cookies will sign you out of HiDrago.
6. How to manage cookies in your browser
Each browser provides instructions to view, block or delete cookies: • Google Chrome: https://support.google.com/chrome/answer/95647 • Mozilla Firefox: https://support.mozilla.org/kb/enhanced-tracking-protection-firefox-desktop • Apple Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac • Microsoft Edge: https://support.microsoft.com/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09 Blocking strictly-necessary cookies may prevent HiDrago from working correctly.
7. Changes to this policy
We may update this Cookies Policy to reflect technical or regulatory changes. The date of the last update will always be published at the beginning of the document. If we introduce new categories of cookies that require your consent, we will request it before installing them.
8. Ads without cookies
HiDrago "Sponsored" ads are contextual (based on your query, the area and the language) and are shown without cookies or tracking technologies: no advertising cookie is set and you are not followed across sites. Impression and click measurement is aggregate and uses pseudonymised identifiers (device hash; IP hash with a daily salt) kept for 13 months. See the Privacy Policy for details.
9. Contact
For any question about this Policy please write to soporte@hidrago.es with «Cookies» in the subject.