Cookies Policy
Last updated: 16 April 2026
This Cookies Policy explains how cookies and similar technologies are used on the Gala Seating platform, operated by Raul-Cristian Maier, trabajador autónomo registered in Spain (NIF Z3230583P), with registered address at Avenida Duque de Ahumada 11, apartment 706A, 29602 Marbella, Málaga, Spain.
1. What are cookies?
Cookies are small text files that a website stores on your device (computer, tablet, or phone) when you visit. They allow the website to recognise your device on subsequent visits and enable core functionality such as keeping you signed in and remembering your preferences.
Cookies do not contain software, viruses, or spyware, and they cannot access information stored elsewhere on your device. This policy also covers similar technologies such as local storage and session storage, which behave like cookies for our purposes.
2. Cookies we use
The Platform uses the following categories of cookies:
Strictly necessary cookies
These cookies are essential for the operation of the Platform and cannot be switched off. Without them, core functions such as authentication and language selection would not work. They do not require your consent under Article 5(3) of the ePrivacy Directive.
| Name / purpose | Provider | Description | Duration |
|---|---|---|---|
| Firebase Authentication session | Google (Firebase) | Maintains your signed-in session securely | Session / up to 1 hour refresh token |
| Language preference | Gala Seating | Stores your selected interface language | Persistent (localStorage) |
| Interface preferences | Gala Seating | Stores UI preferences such as sidebar state | Persistent (localStorage) |
| Anti-CSRF token | Google (Firebase) | Protects against cross-site request forgery during authentication | Session |
Analytics cookies
We use Firebase Analytics (a service provided by Google) to understand how the Platform is used and to improve it. These cookies collect pseudonymised information about pages visited, events triggered, and general interaction patterns. IP addresses are truncated and analytics data is aggregated.
| Name / purpose | Provider | Description | Duration |
|---|---|---|---|
| Firebase Analytics identifier | Google (Firebase) | Pseudonymous identifier used for aggregated usage analytics | Up to 14 months |
Analytics cookies are only set where permitted under applicable law and your preferences. You may opt out of Firebase Analytics by adjusting your browser settings as described below.
3. Why we do not display a cookie consent banner
Under Article 5(3) of the EU ePrivacy Directive (as implemented in Spain, Romania, and other Member States), consent is required only for cookies that are not strictly necessary for a service explicitly requested by the user. The cookies we use for authentication, language selection, and interface preferences are strictly necessary to deliver the service you requested when you signed up, so they are exempt from the consent requirement.
We use Firebase Analytics in an opt-out-respecting configuration without advertising or cross-site tracking. If we introduce non-essential cookies (for example, for marketing or third-party integrations) we will update this policy and, where required, present a consent banner before such cookies are set.
4. Third-party cookies
We do not use third-party cookies for advertising, retargeting, or cross-site tracking. The only third-party cookies that may be set are those placed by Google (Firebase) in the course of providing authentication, hosting, and analytics services described in section 2.
Google provides separate information about its cookies and processing practices at policies.google.com/technologies/cookies.
5. Managing or disabling cookies
You can manage or delete cookies through your browser settings. Note that disabling strictly necessary cookies may prevent you from signing in or using core features of the Platform. The main browsers provide dedicated help pages on managing cookies:
6. Contact
For any question about this Cookies Policy, please contact us at contact@galaseating.com.