Cookie policy
Last updated: October 5, 2026. Which cookies FlirtMaster uses and how to control them.
A cookie is a small file a site stores on your device. This page explains which ones FlirtMaster uses, what for and for how long. The controller is CODELABS STUDIO, S.L. (tax ID B88708797), registered at Pasaje Federico García Lorca, 6, 3º E, 29130 Alhaurín de la Torre (Málaga), Spain. Questions: dpo@memchats.com.
1. Technical cookies (no consent needed)
They are strictly necessary for the site to work and we do not ask your permission for them.
| Cookie | Purpose | Duration |
|---|---|---|
next-auth.session-token | Keeps you signed in (HttpOnly, Secure, SameSite=Lax) | Session |
NEXT_LOCALE | Remembers the language you want to see the site in | Up to 1 year |
cl_consent | Stores your cookie choice, its date and the banner version you answered, so it can be honoured and proven | 180 days |
2. Marketing cookies (only if you accept Advertising)
They are never stored before you accept the Advertising category in the banner. If you choose "Essential only", none is installed and the Meta pixel is not loaded.
| Cookie | Purpose | Duration |
|---|---|---|
cl_attr | First-party. Records where your visit came from (source, medium, campaign, landing page) | 90 days |
partner_ref | First-party. Remembers the code of the partner who recommended us, to credit the referral | 90 days |
_fbp, _fbc | From Meta Platforms Ireland, via the Meta pixel (details below) | Up to 90 days |
Meta pixel dataset ID: n/a. It only loads after you accept Advertising.
Meta pixel (advertising)
FlirtMaster uses the Meta pixel (also called "dataset"), a tool of Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland), to learn whether a visit comes from one of our ads on Facebook or Instagram, whether it ends in a sign-up or purchase, and to show our ads to people with similar interests.
It only loads if you accept the “Advertising” category in the cookie banner. Before you decide, or if you reject it, no Meta code is downloaded and no request is sent to Meta's servers.
What Meta receives: the page you visit, date and time, your IP address, browser and device type, the identifiers of the cookies below and, if you sign up or buy, the event name (for example “CompleteRegistration”) with non-personal data such as amount and currency. We do not send your name, email or phone number, and the pixel's automatic event collection is turned off.
Legal basis: your consent (art. 6(1)(a) GDPR and art. 5(3) ePrivacy Directive). For the collection and transmission of this data Meta and we are joint controllers under Meta's Business Tools Terms; Meta's further use of it is governed by its own privacy policy (facebook.com/privacy/policy).
International transfers: Meta may process the data in the United States. Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework.
You can withdraw consent at any time from the “Cookie settings” link in the footer. When you do, we stop loading the pixel and delete the _fbp and _fbc cookies from our domain. You can also adjust your ad preferences in your Meta account settings.
We store your choice in the cl_consent cookie, which is essential and needs no consent: it only holds which categories you accepted, the date and the banner version you answered. If we add a new third party we raise that version and ask you again.
| Cookie | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
_fbp | Meta (set on our domain) | Tell visits from the same browser apart to measure ads | 90 days | Advertising, first party |
_fbc | Meta (set on our domain) | Keep the click identifier when you arrive from an ad (fbclid) | 90 days | Advertising, first party |
fr | Meta (facebook.com) | Meta advertising; only present if you have a Facebook session or earlier Facebook cookies | 90 days | Advertising, third party |
cl_consent | FlirtMaster | Remember which categories you accepted, when, and for which banner version | 180 days | Essential, first party |
3. Audience measurement
We do not use Google Analytics. We measure visits with Plausible, self-hosted in the European Union, which sets no cookies and does not track you across sites, so it needs no consent. Errors and performance are measured with Sentry, without tracking cookies.
4. Changing or withdrawing your choice
You can change it at any time: . You can also delete cookies from your browser settings. The button below records your refusal and deletes the marketing cookie on the server.
More about how we process your data in the privacy policy.