Cookie policy

Cookies are small files that a website stores in your browser to remember information about your visit. This policy also covers similar technologies, such as local storage (localStorage) and the browser database (IndexedDB).

destolen does not use advertising, tracking or analytics cookies. The website usage statistics do not use cookies (section 3). It only stores in your browser what is strictly necessary for the service to work, which does not require consent under article 22.2 of the Spanish LSSI-CE:

• Firebase Authentication session (IndexedDB and local storage): keeps you signed in. It lasts until you sign out.
• destolen-country (local storage): remembers your language.
• pendingCheckout and borradorDenuncia (local storage): remember what you were doing (reporting a theft, registering a bike, purchasing) and the report draft while you create your account or sign in. They expire after 7 days.
• pendingActiveSearch (local storage): remembers the Search pending payment after creating your account. It is deleted when the process is completed.

We do not use third-party cookies on destolen.com.

To know how many people visit destolen and which parts of the website are used, we use Umami, an open-source statistics tool that we host ourselves (BBRAVE SENTINEL, S.L.) on our server in the European Union (Hetzner, in Helsinki, Finland). The data is not shared with third parties.

• No cookies or persistent identifiers: it stores nothing in your browser and does not recognise you from one day to the next. The script only checks whether the umami.disabled flag exists in local storage, which is used to exclude a browser from the statistics; destolen does not create it.
• Your IP address is not stored. When each visit arrives, the server uses it on the spot to work out the country, region and city and to calculate an encrypted visit code (hash) that changes every day, and then discards it. It is not kept in the web server logs either.
• What is recorded: the public page visited (without parameters or anything you type on it), the domain of the referring website, the type of browser, operating system and device, the screen size, the language and the approximate location (country, region and city). We also count some steps of the service, such as a bike check and its result, a theft report started or paid, a bike registered, a plan purchased or a business request, without any data about you, your bike or your account (no email, serial number or identifiers).
• We do not measure the pages of your private area (garage, thefts, settings) or the administration.
• If your browser has Do Not Track turned on, nothing is sent.

As it sets no cookies and stores nothing in your browser, we do not ask for your consent or show a cookie banner. Legal basis and more details in the Privacy policy.

• Payment with Stripe: payment takes place on Stripe's page (stripe.com), which uses its own cookies for payment and fraud prevention, under its policy.
• Fonts (Google Fonts) and maps (OpenStreetMap): when loading them, your browser connects to their servers, which receive your IP address. They do not set destolen cookies.
• External links: listing portals, location services and other sites we link to may set their own cookies, governed by their policies.

As we only use technical storage and usage statistics that use no cookies and store nothing in your browser (section 3), we do not ask for your consent or show a cookie banner. If in the future we use cookies that require it, we will ask you before setting them and update this policy.

You can view, block or delete cookies and website storage in your browser settings. If you delete destolen's data, you will be signed out and lose the saved language and drafts. Help for the most common browsers: Chrome, Firefox, Safari and Edge.

We will publish any change on this page with its update date.