Legal
Cookie Policy
Read how Timbal uses cookies and similar technologies, which categories require consent, and how you can change your preferences at any time.
Last updated
Welcome to www.timbal.ai. This Website is operated by TIMBAL TECH, S.L. (hereinafter, “Timbal AI”, “we”, “us”) and uses cookies to ensure its proper functioning and to support the provision of the services offered through it.
This Cookie Policy provides information about the use of cookies on this Website in accordance with the applicable data protection legislation, including Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and Law 34/2002 on Information Society Services and Electronic Commerce (LSSICE).
What are cookies?
Cookies are small text files that a website places on the device you use to browse the web (computer, phone, tablet). They let the site remember information about your visit — such as preferred language, consent choices, or whether you have already signed in — so subsequent visits are faster, safer and more relevant.
We also use technologies that behave like cookies — including localStorage, sessionStorage, pixels and similar device identifiers — for the same purposes described in this policy. Where we refer to “cookies” we include these equivalent technologies.
Categories of cookies we use
Following the guidelines of the Spanish Data Protection Agency (AEPD), we set out below the use of cookies made by this Website in order to inform you as accurately as possible.
Depending on who operates them, cookies may be:
First-party: those for which the publisher itself is responsible and which are generally sent to the user’s terminal equipment from equipment or a domain managed by the publisher, from which the service requested by the user is provided.
Third-party: those for which an entity other than the publisher is responsible and which are generally sent to the user’s terminal equipment from equipment or a domain not managed by the publisher, but by another entity that processes the data obtained through the cookies.
Depending on their purpose, cookies may be:
Strictly necessary – technical: those that allow the user to browse the Website and use its different options or services, including those that the publisher uses to enable the management and operation of the Website and to provide its features and services.
Analytics – measurement: those that allow the monitoring and analysis of users’ behaviour on the Website, including the aggregate measurement of activity in order to introduce improvements based on the analysis of usage data.
Depending on how long they remain active:
Session cookies: those designed to collect and store data while the user accesses the Website, and which expire at the end of the session.
Persistent cookies: those in which the data remains stored in the terminal and can be accessed and processed for a period defined by the party responsible for the cookie, ranging from a few minutes to several years.
Below we detail the cookies used on this Website. The consent cookie is set only when you Accept, Reject or Save your preferences, so the site can remember that decision. Google Analytics and PostHog scripts, cookies and equivalent storage are not loaded, read or written until you accept analytics; if you reject them — or have not decided yet — leftover analytics cookies from a previous visit are deleted. This Website does not use marketing or advertising cookies.
Cookies used on this Website
Cookie | Type | Purpose | Duration | Provider |
|---|---|---|---|---|
| Strictly necessary (first-party) | Stores your cookie consent decision (per category) so we do not ask again on every page view. The same decision is mirrored in localStorage as an equivalent technology. | 12 months | Timbal AI |
| Analytics (third-party) | Stores a pseudonymous device identifier so we can group page views and events into a single session and surface aggregate funnels. After analytics consent, PostHog also writes equivalent identifiers to localStorage and may record a masked session replay (see below). | 1 year | PostHog Inc. (EU instance, Frankfurt) |
| Analytics (third-party) | This cookie is used by Google Analytics to persist session state. | 1 year 1 month | |
| Analytics (third-party) | Distinguishes unique visitors so aggregate counts (sessions, page views, conversion funnels) are accurate. | 1 year 1 month |
If you accept analytics cookies, PostHog may also record a session replay of your visit so we can see how the Website is used. Replays mask what you type in form fields and other inputs, do not record request bodies or headers, and are not used to build a personal profile unless you later identify yourself. You can stop this at any time by rejecting analytics cookies in Cookie Settings.
The Website is hosted on Framer. Framer’s built-in audience measurement loads with the page and does not use cookies or any other persistent identifier. Framer hashes the IP address and user agent with a secret that rotates daily, so a visitor is counted at most once per day and cannot be recognised across days. This measurement is not a cookie; it is described here for completeness.
Legal basis
The legal basis for processing personal data collected through strictly necessary cookies is our legitimate interest, as regulated by law, in operating a secure and functional Website (Article 6.1.f GDPR), and the exemption provided by Article 22.2 LSSICE.
The legal basis for analytics cookies is your freely-given, specific and informed consent (Article 6.1.a GDPR and Article 22.2 LSSICE). You can withdraw consent at any time; withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
How to manage your preferences
When you first visit the Website, you will be presented with a cookie banner allowing you to manage your cookie preferences. Through this banner, you may:
Accept all cookies: all non-essential cookies will be enabled.
Reject non-essential cookies: only strictly necessary cookies will remain active.
Configure your preferences: you may select which cookie categories you wish to enable or disable and obtain further information about each category.
You can review, update or withdraw your consent at any time using the Cookie Settings link available on the Website. Opening the Cookie Settings panel will display the current status of each cookie category, allowing you to modify your preferences and save your choices. For more information about the processing of personal data, please consult our Privacy Policy.
How can you disable or delete cookies?
You may manage or delete cookies at any time through the Cookie Settings panel available on the Website and/or through your browser settings. Most browsers allow you to block or delete cookies, to accept or reject all cookies by default, or to receive a notification before a cookie is stored on your device.
Information on managing cookies in the most common browsers is available at the following links:
Google Chrome — chrome://settings/cookies
Mozilla Firefox — about:preferences#privacy
Safari — Preferences → Privacy → Manage Website Data
Microsoft Edge — edge://settings/content/cookies
International data transfers
Timbal AI does not generally carry out international transfers of personal data outside the European Economic Area (“EEA”) in connection with its own use of cookies.
However, certain third-party service providers used through the Website may process personal data outside the EEA or allow access to such data from countries outside the EEA, which may result in international data transfers.
In such cases, Timbal AI will ensure that appropriate safeguards are implemented in accordance with applicable data protection legislation, including, where required, the use of adequacy decisions adopted by the European Commission, Standard Contractual Clauses or other valid transfer mechanisms recognised under the GDPR.
Users may obtain further information regarding the processing of personal data by such third parties by consulting their respective privacy policies.
Changes to this policy
We may update this Cookie Policy from time to time to reflect changes to the cookies we use, to the law, or to our operational practices. When we make a material change we will update the “Last Updated” date at the top of this page and — where the change affects previously-given consents — ask you to review your preferences again.
Your rights
You may exercise, under the terms provided for in the applicable data protection legislation, your rights of access, rectification, erasure, restriction of processing, objection, data portability, the right not to be subject to automated decisions, and the right to withdraw your consent, in relation to the processing of your personal data. For further information on how to exercise these rights, please consult our Privacy Policy. If you consider that the processing of your personal data infringes the applicable legislation, you may also lodge a complaint with the Spanish Data Protection Agency (AEPD) through its official website: https://www.aepd.es.
Contact us
If you have questions about this Cookie Policy or about how we process your personal data, you can contact us at privacy@timbal.ai or at the following address: Carrer de Pere IV, 105, 109, Sant Martí, 08018 Barcelona, Spain.