Last updated: September 10, 2026
In compliance with Article 22(2) of Spanish Law 34/2002 of July 11 on Information Society and Electronic Commerce Services ("LSSI-CE"), applicable under its Article 4 to providers established outside the European Union that direct their services to Spain, in relation to Directive 2002/58/EC of the European Parliament and of the Council of July 12, 2002, on the processing of personal data and the protection of privacy in the electronic communications sector, amended by Directive 2009/136/EC, as well as Regulation (EU) 2016/679 ("GDPR") and the Guide on the use of cookies of the Spanish Data Protection Agency in its current edition, the user is informed that the Clonio platform and the Clonio browser extension for Google Chrome (collectively, the "Services") use first-party and third-party cookies, as well as equivalent local storage mechanisms, on the user's device for the purposes and under the conditions described below.
Cookies are small text files that web servers transmit to the user's browser and that it stores on their terminal device (computer, mobile phone, tablet, or other similar devices) during navigation through the Platform, allowing the web server to remember certain information about the user's session, configuration preferences, authentication state, and other technical data necessary for the proper functioning of the service. Technologies functionally equivalent to cookies, such as browser local storage (localStorage, sessionStorage) or session identifiers transmitted via URL parameters or HTTP headers, may equally be used by the Platform for the same purposes and under the same conditions established here.
The web Platform uses the following categories of cookies, differentiated according to ownership (first-party/third-party), purpose, and whether they are subject to the requirement to obtain prior informed consent from the user under Article 22.2 LSSI-CE.
3.1 First-party technical cookies, exempt from consent. These are cookies strictly necessary for providing the information society service expressly requested by the user and, therefore, exempt from the requirement to obtain consent. The Platform uses the following: (a) the "sb-*-auth-token" cookie, technical type and session duration, whose sole purpose is to maintain the user's authentication state once signed in; (b) the "sb-*-auth-token-code-verifier" cookie, technical type and session duration, whose purpose is security verification during the LinkedIn authentication flow, protecting the user from authorization code interception attacks; and (c) the "clonio-consent" cookie, technical type and maximum duration of six (6) months, whose purpose is to remember the user's decision regarding cookies not exempt from consent, so the configuration banner does not show again after each navigation.
3.2 Third-party analytics cookies, subject to prior consent. The Platform uses cookies and local storage mechanisms provided by PostHog Inc. (a company incorporated under the laws of the State of Delaware, United States, with a European instance operated in the European Union) for service usage measurement, technical error detection, and session recording (session replay) with automatic masking of sensitive fields such as passwords, email addresses, and phone numbers. The data is processed in infrastructure located in the European Union (Frankfurt, Germany). These cookies are only installed on the user's device after obtaining their explicit consent through the configuration banner. Specifically, after accepting analytics cookies, a main cookie named "ph_*_posthog" is installed, persistent type, with a maximum duration of one (1) year, complemented by local storage (localStorage) associated with the clonio.es domain, the purpose of which is to pseudonymously identify the user's device to group their usage events in the analytics panel. The provider's privacy policy can be consulted at posthog.com/privacy, and the Data Processing Addendum at posthog.com/dpa.
The Clonio browser extension for Google Chrome uses the browser extensions' own storage mechanism (chrome.storage.local), functionally equivalent to local storage (localStorage), to keep the following data of strictly technical and necessary nature for its operation: (a) the user's authentication token, technical type, with a maximum validity of twenty-four (24) hours; (b) the email address associated with the account, technical type, used to identify the authenticated user; (c) the timestamp of token reception, technical type, used to control token validity; (d) the date of the last synchronization and the number of posts synchronized, technical type, used to inform the user about sync status; and (e) a temporary post cache, technical type, with a maximum validity of thirty (30) seconds, used to avoid redundant queries to the server during navigation. This data is automatically deleted when the extension is uninstalled or when its respective validity periods expire. The extension does not install cookies or execute third-party code for analytics, advertising, or tracking purposes.
Consent for installing non-exempt cookies (section 3.2) is requested from the user on their first visit to the Platform via a non-blocking configuration banner, in which the user is offered two options with equal visual prominence, size, and ease of access: "Reject" and "Accept". While the user has not made an express decision, non-exempt cookies remain disabled and no data is transmitted to the indicated third-party providers. The decision is stored in the technical "clonio-consent" cookie for a period of six (6) months, after which the banner will request the user's consent again.
The user may withdraw or modify previously given consent at any time and with the same ease with which they gave it, through the "Withdraw my consent" button available at the end of this policy, the activation of which will delete the "clonio-consent" cookie and cause the configuration banner to reappear on the next navigation through the Platform. Additionally, the user may configure their browser to block, restrict, disable, or delete cookies stored on their device, according to the official documentation of each browser. Withdrawal of consent will not affect the lawfulness of processing based on consent prior to that withdrawal.
Disabling, deleting, or blocking technical cookies (section 3.1) will prevent the service from working properly and, in particular, will make it impossible for the user to sign in and maintain their authentication state during navigation.
For any inquiries related to this cookie policy, the user may contact contact@clonio.es.