Cookie policy

What the rule requires

This is a translation for information only. The Spanish version of this page is the binding one, and the rules cited are Spanish law.

Article 22.2 of Spanish Law 34/2002 on information society services requires the user’s consent to store or retrieve information on their terminal equipment — cookies included — except where that information is strictly necessary to provide the service the user has requested.

What this site uses

This site loads no analytics or advertising tools. The optional Instagram videos and Google Maps map connect only if you accept loading them, as explained below. When optional WhatsApp continuation is available, preparing the request submission creates the first-party cookie __Host-velvet-continuidad on the server. Opening this page alone does not create it. Its random value proves private continuity for that request; knowing the public request code cannot replace it.

It is HttpOnly, accessible to the server rather than page JavaScript, Secure — HTTPS only — and SameSite=Strict. It lasts at most 24 hours, including after closing the browser; reusing it does not renew that period. It contains no form data and does not authorise notices or marketing. The WhatsApp link is prepared only when you choose to continue, expires after 15 minutes and is not stored in the tab draft.

The site uses no localStorage and serves fonts from this site. The draft and request receipt are kept in the tab as described below.

If you choose a photo, it uploads straight to the storage that keeps it. That upload goes through no intermediary, carries no cookies, and does not happen if you upload nothing.

How the request is protected against automated submissions

The appointment request is protected against automated submissions, because it is an open form with no account. That protection loads only on the request page, and its code is served from this same site: it is not a third-party resource nor a measurement service, and it knows nothing about you outside that form.

This check protects submission of the request. It is not used for advertising, visit measurement or tracking outside the form.

What the tab keeps while you request an appointment

When you write in the appointment request, this site keeps two entries in the browser’s session storage (sessionStorage): velvet.solicitud.borrador, with what you have written so far, the artist, style and piece preferences you have chosen or removed and, if you have already uploaded it, the reference to your photo; and velvet.solicitud.resultado, with your request code and summary once the request has been saved. When private continuity exists, the receipt also contains its non-secret selector and operation reference; never the cookie or the private link.

They serve one purpose only: so you don’t lose what you wrote if you reload the page or come back from WhatsApp. They last until you close the tab, each tab keeps its own, and the photo reference stops being valid after 24 hours; the photo of a form you never send is deleted in under three days. They are not sent to anyone this way, they are not used to track you or to measure anything, and nothing is kept unless you write.

This is technical storage: it is strictly necessary to provide the service you expressly request — preparing and sending your request — and that is why article 22.2 of Spanish Law 34/2002 exempts it from consent.

The Instagram video

The laser removal page shows a cover image stored on this site. The video loads its player and connects to Instagram only if you press “Accept and load video”. You can keep reading, request an appointment or follow the link to the post without loading it here.

If you accept, your browser connects to Instagram, which may use cookies and process data from that connection under its privacy policy. You can close the video to remove the player. This site does not save that choice in cookies or browser storage.

The optional Google Maps map

On Visit, Google Maps helps you locate the studio. It connects to Google only when you press “Accept and load map”. Before accepting you can read the address and use the external studio link; the map is not needed to contact us or request an appointment.

If you accept, Google receives connection data, such as your IP address and technical browser data, and may use cookies under its privacy policy. “Remove map” removes the frame from this page; it does not delete cookies Google has already stored, which you can manage in your browser. This site does not save the choice in cookies or browser storage. Reloading requires a new choice.

What happens if that changes

If this site adds another analytics tool, measurement pixel or another externally served resource, this page will be updated and the consent notice will be published in the same change, before anything is installed in your browser. What data is processed and on what legal basis is set out in the privacy policy.