Cookie Policy.

A cookie is a small text file that a website stores in the user's browser when visited. Cookies allow the device to be recognized on subsequent visits, remember preferences and provide essential functionality. Under the term "cookies" we also include equivalent technologies such as localStorage, sessionStorage, HTTP header identifiers or any other mechanism that allows information to be stored or retrieved on the user's device.

For the purposes of this Policy, we distinguish cookies according to the categories established by the Spanish Data Protection Agency (AEPD):

By ownership

First-party (managed directly by Zoku Athletics) or third-party (managed by providers external to the Owner).

By purpose

Technical (strictly necessary), preference or personalization, analytics or measurement, and advertising or behavioral advertising.

By duration

Session (deleted when the browser closes) or persistent (remain on the device for the declared term).

Listed below, with details of provider, purpose, category and duration, are all cookies and similar technologies that may be installed when browsing the Website. This table is kept up to date according to the actual technical implementation of the product.

Strictly necessary cookies (no consent)

zoku_session

HttpOnly cookie containing the signed session token issued by Supabase Auth after a successful login. It is essential to maintain the authenticated session in protected areas (/cuenta, /admin). It is issued with the attributes HttpOnly, Secure (in production) and SameSite=Lax. First-party · Session / persistent based on remember-me preference. Maximum duration: that of the token issued by Supabase.

language preference

Value stored in localStorage by the Website's LanguageContext to remember the chosen language (es / en). First-party · Persistent. Removed when browser data is cleared.

Performance measurement (no cookies, no consent)

Vercel Speed Insights

Aggregated and anonymous web performance metrics (Core Web Vitals: LCP, INP, CLS) collected by the hosting provider Vercel Inc. No identity is associated with the visitor. Not a cookie: it neither writes nor reads anything on your device, and it is served from this same domain. It always loads, without asking, because its purpose is technical —knowing whether the site performs well for whoever is using it— and not counting visits. More information: Vercel privacy policy.

Analytics cookies (consent required)

Vercel Analytics

Aggregated page-view counting without persistent identifiers or traditional cookies. Third-party · Non-persistent. Activates only after consent in the cookie banner.

• Strictly necessary cookies: exception under Article 22.2 LSSI-CE (cookies essential for the provision of the service expressly requested). No prior consent required.
• Analytics and similar cookies: express consent provided through the cookie banner on the first visit, under Article 6.1.a GDPR. Withdrawal is as straightforward as granting it, via the preferences center permanently accessible from the footer.

You can accept, reject or customize the use of non-essential cookies from the preferences panel of the banner that appears the first time you enter the Website. You can revoke your consent or change your choices at any time via the Cookie preferences link in the footer.

Additionally, all browsers allow you to block or delete cookies from their settings. Note that rejecting strictly necessary cookies will prevent the Website from functioning correctly (for example, you will not be able to maintain the authenticated session). Official links:

• Google Chrome
• Mozilla Firefox
• Safari (macOS)
• Microsoft Edge

Some providers that supply the technical services associated with cookies (in particular Vercel Inc.) may perform occasional processing outside the European Economic Area. In such cases, transfers are covered by the standard contractual clauses approved by the European Commission (Decision 2021/914) and, where applicable, by additional measures agreed with the provider. For more information see our Privacy Policy, section International transfers.

You may exercise at any time the rights recognized by the GDPR (access, rectification, erasure, objection, restriction, portability and withdrawal of consent) by contacting privacidad@zokuathletics.com. In case of disagreement, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).

This Cookie Policy is reviewed periodically to reflect the actual technical implementation of the Website and regulatory changes. When substantial modifications are introduced, consent will be requested again in the cookie banner. The current version is always available at this URL with the last-updated date indicated at the top of the document.