The short version
- No advertising cookies and no third-party trackers.
- Visits are counted with our own software, anonymously. Without your consent, a visit is never linked to anything you send us.
- With your consent we also keep a returning-visitor id in your browser, link your visit to the booking or enquiry you send (to learn which pages and adverts lead to bookings), count your visit in our staff’s live view, and note which form field refused what you typed — never what you typed.
- The booking form keeps what you type in this tab only, so that going back a step does not lose it.
- The law treats entries in your browser’s storage like cookies (LSSI-CE art. 22.2), so they are listed here in the same way.
- Paying a booking by card sets one cookie of ours, so that the way back from paying reopens your booking in the browser you paid in and in no other (it is listed in the table).
- While it is switched on, Cloudflare’s robot check protects our forms (it is listed in the table).
What this site keeps in your browser
| Name | Kept in | What it holds | How long |
|---|---|---|---|
melt_consentNeeded for something you asked forLocal storage · Thirteen months from your answer; then the notice asks again. Sooner if you change your answer or clear this site’s data. | |||
melt_sidAnonymous visit countingSession storage · Until you close the tab. A new id replaces it after 30 minutes without activity. | |||
melt_vidOnly with your consentLocal storage · Until your answer ends — you withdraw your consent, or thirteen months pass and the notice asks again — or you clear this site’s data. | |||
melt_book_detailsNeeded for something you asked forSession storage · Until the booking is made or you close the tab. | |||
melt_book_attemptNeeded for something you asked forSession storage · Until the booking is made or you close the tab. | |||
melt_bookedNeeded for something you asked forSession storage · Until you close the tab. | |||
react-router-scroll-positionsNeeded for something you asked forSession storage · Until you close the tab. | |||
melt_ops_chime_offNeeded for something you asked forLocal storage · Until they switch the sound on again or clear this site’s data. | |||
melt_ops_install_offNeeded for something you asked forLocal storage · Until they clear this site’s data. The same suggestion stays available on their account page. | |||
melt_payNeeded for something you asked forCookie · Four hours. | |||
Cloudflare TurnstileNeeded for something you asked forCloudflare’s own frame · The token is used once and expires within five minutes. What Cloudflare keeps in its frame is set out in its Turnstile privacy addendum. |
What your answer changes
The notice at the bottom of the screen asks one question. Both answers are equally easy to give, and nothing is chosen for you. Your answer stands for thirteen months; then the notice asks again.
Essential only, or no answer yet: visits are counted anonymously — the pages opened, the site that sent you, the device type, the country and region, and what is used on a page (scrolling, the buttons pressed, the steps of a form) — and nothing you send us through a form is linked to your visit. The only campaign detail a form can carry is where the link you arrived by came from: its utm_source, utm_medium or utm_campaign tags, a ref tag, or the advertising network a click id points to, never the id itself.
Accept adds the following. A random returning-visitor id is kept in your browser’s local storage, so that we can tell a returning visitor from a new one. When you send a booking or an enquiry, your visit is linked to it, so that we can see which pages and adverts lead to bookings; for that, the record of your visit keeps its id instead of having it replaced after an hour. Your visit is counted in our staff’s live view — by page, device type, country and the kind of link you came by. The view is updated when your browser sends its measurements: at once when you press Accept, and after that mostly when you leave or hide the page. The entry kept for this is removed about ten minutes after the last signal from your visit. And when a form refuses what you typed in a field, the name of that field is noted, never what you typed.
Without your consent the counting only gives us totals: your visit never appears in our live view, its id is replaced about an hour after your last page by one that exists nowhere else, it is joined to nothing and no other company is involved; that is why it runs without asking. How we use the data, and how long we keep it, is on the privacy page.
Cookies for our staff
Our staff also receive the cookies below, when they sign in to the back office. A visitor never gets any of them.
| Name | What it does | How long |
|---|---|---|
melt_ops | Keeps a member of staff signed in to the back office. It can only be read by our server (HttpOnly) and is never sent to another site (SameSite=Strict). | 12 hours at most. It stops working after 2 hours without activity, or when they sign out. |
melt_mfa | Holds a half-finished sign-in between the correct password and the second step (the code from an authenticator app), so that the password is not asked for twice. Readable only by our server and never sent to another site. | Five minutes, or until the sign-in is finished. |
melt_market | Remembers which market a member of staff is looking at in the back office. Readable only by our server. | One year, or until they choose another market. |
melt_ops_theme | Remembers whether a member of staff chose the light or the dark look for the back office. Readable only by our server and never sent to another site. | One year, or until they choose another look. |
Change your answer
Your answer in this browser
JavaScript is off or still loading. Nothing is measured without it.
Your answer takes effect at once. “Essential only” deletes the returning-visitor id straight away, and from then on nothing you send is linked to your visit. Withdrawing consent does not undo what was lawfully done before. The “Cookie settings” link at the foot of every page opens the same choice.
Clearing or blocking storage
You can also clear or block this site’s storage in your browser’s settings. The site keeps working: without storage the notice cannot remember your answer and treats you as “essential only”, and the booking form cannot remember your details between steps.
Closing the tab removes everything kept in session storage.
Who is responsible
Melt Clean is responsible for this website; who that is, and how to reach us, is on the legal notice. The data-protection supervisory authority in Spain is the Agencia Española de Protección de Datos (AEPD), aepd.es.