Cookie inventory
Name	Provider	Purpose	Duration
`PODOLOGIA_PRIEGO_SESSID`	App (first-party)	Maintains the authenticated HTTP session required to access protected areas of the service (up to 1 day without Remember me).	1 day
`REMEMBERME`	App (first-party)	Enables persistent authentication when the user selects “Remember me” at sign-in (secure token; up to 30 days).	30 days
`csrf-token_*`	App (first-party)	Short-lived double-submit CSRF cookie set by Symfony when submitting protected forms (name pattern csrf-token_<token>; __Host- prefix on HTTPS).	Session
`Cookie_Consent`	App (first-party)	Records that a cookie-consent decision was made so the banner is not shown again until preferences change or expire.	1 year
`Cookie_Consent_Key`	App (first-party)	Anonymous technical key linking the browser consent record to the server-side consent audit log (accountability).	1 year
`Cookie_Category_analytics`	App (first-party)	Stores whether the analytics category was accepted or refused (consent machinery; not an analytics tracker itself).	1 year
`Cookie_Category_preferences`	App (first-party)	Stores whether the preferences category was accepted or refused (consent machinery).	1 year
`Cookie_Category_marketing`	App (first-party)	Stores whether the marketing category was accepted or refused (consent machinery; not a marketing tracker itself).	1 year
`di_obs`	App (first-party)	HttpOnly device-observation pointer used to recognise returning browsers for account security (abuse prevention). It is not a login credential.	1 hour

Cookie inventory
Name	Provider	Purpose	Duration
`_ga`	Google Ireland Limited	Google Analytics 4 identifier (loads only after analytics consent when GA4_MEASUREMENT_ID or GTM_ID is configured).	2 years
`_ga_*`	Google Ireland Limited	Per-property Google Analytics 4 session cookie (consent-gated).	2 years
`_gid`	Google Ireland Limited	Distinguishes users in Google Analytics for 24 hours (consent-gated).	24 hours
`_gat`	Google Ireland Limited	Google Universal Analytics throttling cookie (loads only after analytics consent when the historical UA property is enabled).	1 minute

Cookie inventory
Name	Provider	Purpose	Duration
`_fbp`	Meta Platforms Ireland Limited	Meta Pixel browser identifier (loads only after marketing consent when META_PIXEL_ID is configured).	3 months
`_fbc`	Meta Platforms Ireland Limited	Meta click identifier when the visitor arrived from Facebook or Instagram ads (consent-gated).	3 months