1. What cookies and local storage are
Cookies are small files a website stores in your browser. Local storage (localStorage) is similar: a space in your browser where a website can save a value to use on later visits. The law (Article 22(2) of Spanish Law 34/2002, LSSI-CE) applies to both equally, and this policy covers them together.
2. What this website uses
This website does not use advertising or social media cookies, or any that builds a profile of you. It uses what is strictly necessary to work, the language you choose and, only if you accept them, Google Analytics 4 analytics cookies:
| Name | Type | Set by | Purpose | Duration |
|---|---|---|---|---|
xr-idioma | Browser local storage (localStorage) | First party (xrexperiences.es) | Remembers the language (Spanish or English) you view the website in when you switch it with the flag. It only stores “es” or “en” and is not sent to any server. | Until you delete it in your browser |
__cf_bm, cf_clearance and similar | Technical cookies | Cloudflare, Inc. | Security: telling people from bots and protecting the website against attacks. Cloudflare only sets them when its protection needs to (for example, with suspicious traffic). | __cf_bm: 30 minutes. cf_clearance: depends on the security settings, usually hours |
| FareHarbor cookies | Third-party technical cookies | FareHarbor Holdings, Inc. | Only when you pick a time and open the booking: needed for the booking and payment process inside its window to work. They are not set if you are just browsing the website. | See FareHarbor’s policy |
xr-cookies | Browser local storage | First party (xrexperiences.es) | Remembers your choice in the cookie notice (accept or reject analytics) so we do not ask again. | 12 months |
_ga, _ga_* | Analytics cookies (only if you accept them) | Google Ireland Ltd. (Google Analytics 4) | Tell visitors and sessions apart to count pages viewed, where visits come from, tours looked at and bookings started. IP anonymised. Not set if you reject analytics in the notice. | _ga: 2 years. _ga_*: 2 years |
3. Your consent and how to change it
Technical storage needed to provide a service you have requested and storage that remembers a preference of yours, such as language, do not require consent (Article 22(2) LSSI-CE and the Spanish Data Protection Agency’s Guide on the use of cookies). Analytics cookies do: that is why, when you arrive, we show a notice with two equal buttons, “Accept” and “Reject”. Until you accept, Google Analytics is not loaded and none of its cookies are set. If you reject, the website works exactly the same.
You can change your mind at any time: click (also in the footer of every page) and the notice appears again. If you withdraw consent, we stop measuring from that moment.
4. Other third-party services
- Typefaces: fonts are served from our own server, with no connection to Google or any other third party and no cookies.
- Google reviews: the rating is fetched by our server; your browser does not connect to Google or receive its cookies to show it.
- Links to WhatsApp, Google Maps, Instagram, Facebook or booking platforms: they store nothing while you are on our website. If you click them, you go to their site and their cookie policy applies.
5. How to delete or block this storage
You can delete the language setting and cookies at any time in your browser settings (usually under “Privacy” or “Clear browsing data”), or block them. If you do, the website will still work; you will just need to choose your language again, and if you block FareHarbor’s cookies you will not be able to complete the booking in its window. Help for the most common browsers: Chrome, Firefox, Safari and Edge.
6. More information
Controller: XR EXPERIENCES 2025, S.L.. For any question, write to us at [email protected]. How we process your personal data: privacy policy.
This English version is provided for convenience; in case of discrepancy, the Spanish version prevails.
Last updated: 2 November 2026