Introduction
This policy describes the use of cookies and similar technologies on the website verifactu.c2developers.com and the portal app-verifactu.c2developers.com, owned by C2Developers S.I. Verifactu is a professional service for submitting billing records to the AEAT in compliance with Royal Decree 1007/2023.
On the portal we only use cookies that are essential for its operation and to remember your consent. On the public website we additionally use the Meta pixel for marketing purposes, only if you expressly consent through the cookie banner. If you do not accept the portal's strictly necessary cookies, you will not be able to log in or operate it.
What are cookies?
Cookies are small text files that a website stores in your browser when you visit it. They allow the site to recognise your session and keep state between requests. They may be:
- Session cookies: deleted when you close the browser.
- Persistent cookies: kept for a defined period.
- First-party cookies: set by the domain you visit.
- Third-party cookies: set by external domains. Verifactu only uses third-party cookies (Meta) on the public website and only with your prior consent.
How we use cookies
We use cookies for the following purposes:
- Strictly necessary and functional first-party cookies: keeping the user's session authenticated on the portal through a signed token, remembering which application or issuer is selected and storing your consent preference so the notice is not shown again. They do not require consent.
- Marketing (only on the public website and only with your consent): the Meta pixel (Meta Platforms Ireland Ltd.) allows us to measure the effectiveness of our advertising campaigns and show you relevant advertising. If you reject it, the pixel is not loaded and no Meta cookie is set. You can withdraw your consent at any time via the “Cookie settings” link in the footer.
On the portal we do not profile users, measure audiences or cross-reference data with advertising platforms.
Cookies we use
Full list of cookies:
| Name | Category | Duration | Description |
|---|---|---|---|
| verifactu_jwt | Strictly necessary | Session | Signed authentication token. Essential to identify the user after login. |
| verifactu_app | Functional | 180 days | Identifier of the active application or issuer. Lets the front end restore the context on reload. |
| cookie-consent / verifactu_cookie_consent | Strictly necessary | 1 year | Stores your decision about the cookie notice so it is not shown again. |
| _fbp | Marketing (Meta, third party) | 90 days | Meta pixel. Only set on the public website if you accept the marketing category. Allows Meta to attribute advertising conversions. |
The portal cookies are first-party. The _fbp cookie is a third-party cookie (Meta) and is only set with your express consent.
How to control and delete cookies
You can review, block or delete stored cookies at any time from your browser settings. The exact menu varies by browser but is usually found under Settings > Privacy and security > Cookies in Chrome, Firefox, Edge and Safari.
Please note that blocking the session cookie will prevent you from using the portal, as your sign-in cannot otherwise be maintained between requests.
IP addresses and server logs
Our servers automatically log the originating IP address, the date, the endpoint called and the response code. This information is processed for security purposes (abuse detection, audit trail) and retained for the period required by tax and data protection law. It is not used for advertising and is not shared with third parties except as required by law.