Cookie Policy
Last updated: March 28, 2026
1. What Are Cookies and Similar Technologies?
A cookie is a small text file that is downloaded and stored on the user's device (computer, tablet, smartphone or other) when they visit a website. Cookies allow the website to remember information about the visit, such as the preferred language, browsing preferences or the status of a logged-in session.
In addition to cookies, other similar technologies may be used for equivalent purposes:
- Scripts: code fragments that run in the user's browser to make the website function correctly and interactively.
- Web beacons or tracking pixels: small invisible elements embedded in pages or emails that allow recording of whether the user has accessed specific content.
- Local storage (localStorage / sessionStorage): browser mechanisms that allow information to be stored on the user's device in a manner similar to cookies.
Throughout this policy, the term "cookies" is used to refer to all these technologies collectively, unless otherwise stated.
2. Data Controller
The party responsible for the cookies used on the websites mivpn.net and mivpn.es is:
- Owner: Rabi Ouallam Jamladi (MiVPN)
- Tax ID (NIF): 77681099W
- Address: Rúa A Pomba 13 1º, 36162 Pontevedra (Pontevedra), Spain
- Email: privacy@mivpn.net
3. Legal Framework
The use of cookies on MiVPN's website is governed by current Spanish and European privacy and electronic communications legislation, in particular:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR).
- Spanish Organic Law 3/2018 of December 5 on Personal Data Protection and Digital Rights Guarantee (LOPDGDD).
- Spanish Law 34/2002 of July 11 on Information Society Services and Electronic Commerce (LSSI-CE), in particular Article 22.2.
- Directive 2002/58/EC of the European Parliament and of the Council (ePrivacy Directive), as amended by Directive 2009/136/EC.
- The Spanish Data Protection Agency (AEPD) Cookie Use Guide, in its current version.
4. Types of Cookies by Purpose
4.1. Technical or Strictly Necessary Cookies
These are essential for the correct functioning of the website. They enable navigation, maintenance of the authenticated user session, management of the control panel and the operation of basic service features. Without these cookies, the website cannot function properly.
In accordance with Article 22.2 of the LSSI-CE and the AEPD Guide, strictly necessary cookies do not require prior user consent.
4.2. Preference or Functional Cookies
These allow the website to remember user preferences (language, region, interface settings, etc.) to personalise the browsing experience. They require user consent unless they are strictly necessary for the provision of the service.
4.3. Analytical or Statistical Cookies
These collect aggregated and anonymous information about how users interact with the website (pages visited, time spent, traffic origin, etc.) in order to improve performance and user experience. They require prior user consent.
4.4. Security Cookies
These are used to protect the website and users against fraudulent use, automated attacks or unauthorised access (for example, through CAPTCHA verification systems). They may be considered technically necessary depending on their specific implementation.
5. Cookies Used on This Website
The following table provides details of the cookies currently active on MiVPN's websites. If new cookies are added in the future, this policy will be updated prior to their deployment.
5.1. First-Party Cookies
| Name | Purpose | Type | Duration | Consent |
|---|---|---|---|---|
| session_id / auth_token | Maintain the authenticated user session in the MiVPN control panel and services. | Technical / Necessary | Session or until logout | Not required |
| cookie_consent | Store the user's cookie consent preferences to avoid showing the banner on subsequent visits. | Technical / Necessary | 12 months | Not required |
| lang / locale | Remember the language or region selected by the user. | Preferences | 12 months | Required |
5.2. Third-Party Cookies
Google Analytics
| Name | Purpose | Type | Duration | Consent |
|---|---|---|---|---|
| _ga | Distinguish unique users to generate website usage statistics. | Analytics | 2 years | Required |
| _ga_[ID] | Maintain the Google Analytics 4 session state. | Analytics | 2 years | Required |
| _gid | Distinguish users in 24-hour sessions for usage statistics. | Analytics | 24 hours | Required |
Google Analytics is a web analytics service provided by Google LLC (USA), subject to the EU-US Data Privacy Framework. MiVPN has configured Google Analytics with IP anonymisation enabled. Data collected is processed in accordance with Google's privacy policy, available at https://policies.google.com/privacy. Users may opt out by installing the browser add-on available at https://tools.google.com/dlpage/gaoptout.
Google Fonts
| Service | Purpose | Type | Transfer | Consent |
|---|---|---|---|---|
| Google Fonts | Load typefaces from Google's servers for the correct display of the website design. May involve transmission of the user's IP address to Google. | Functional / Aesthetic | Google LLC (USA) — Data Privacy Framework | Required |
Google Fonts may transmit the user's IP address to Google's servers when loading typefaces. MiVPN is considering migrating fonts to self-hosting to eliminate this transfer. Google's privacy policy: https://policies.google.com/privacy.
Google reCAPTCHA (planned — pending activation)
| Name | Purpose | Type | Duration | Consent |
|---|---|---|---|---|
| _GRECAPTCHA | Verify that the user is human and protect website forms against automated submissions and bot attacks. | Security / Functional | 6 months | Required |
Google reCAPTCHA is an anti-fraud protection service provided by Google LLC (USA), subject to the EU-US Data Privacy Framework. This policy will be updated upon its activation. Google's privacy policy: https://policies.google.com/privacy.
6. Consent and Preference Management
The first time the user visits MiVPN's website, a cookie banner developed in JavaScript is displayed, informing the user about the use of cookies and inviting them to select their preferences. The user may:
- Accept all cookies — including analytics and preference cookies.
- Reject non-essential cookies — only strictly necessary technical cookies will be activated.
- Manage preferences by category — accepting or rejecting each type of cookie individually.
Technical or strictly necessary cookies are always activated regardless of the user's choice, as they are essential for the website to function.
The user may modify or withdraw their consent at any time by accessing the cookie preference panel available on the website, or by deleting stored cookies from their browser settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
7. How to Enable, Disable or Delete Cookies from Your Browser
In addition to the website's preference panel, users can manage cookies directly from their browser settings. The following links provide instructions for the most common browsers:
- Google Chrome: https://support.google.com/chrome/answer/95647
- Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
- Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
- Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge
- Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Please note that disabling or deleting all cookies may affect the correct functioning of MiVPN's website and services, including the user session and control panel. If browser cookies are deleted, consent preferences will be lost and the cookie banner will appear again on the next visit.
8. International Transfers
Some of the third-party cookie providers listed in this policy are established outside the European Economic Area (EEA), particularly in the United States. Such transfers are carried out under appropriate safeguards in accordance with Chapter V of the GDPR, primarily the EU-US Data Privacy Framework, to which Google LLC and other providers mentioned in this policy are certified.
Users may obtain further information about international transfers affecting their data by writing to privacy@mivpn.net.
9. User Rights
In relation to the processing of personal data arising from the use of cookies, the user may exercise at any time the following rights recognised by the GDPR and LOPDGDD:
- Right of access: to know what personal data MiVPN processes through cookies.
- Right to rectification: to request the correction of inaccurate data.
- Right to erasure: to request the deletion of data when it is no longer necessary.
- Right to restriction: to request the suspension of processing in the circumstances provided for by the GDPR.
- Right to data portability: to receive data in a structured format or request its transfer to another controller.
- Right to object: to object to the processing of data based on legitimate interest or for marketing purposes.
- Right to withdraw consent: at any time and without retroactive effect.
To exercise these rights, the user must contact privacy@mivpn.net, indicating the right they wish to exercise and enclosing a copy of their identity document. MiVPN will respond within a maximum period of one month from receipt of the request.
If the user considers that the processing of their data does not comply with applicable regulations, they may lodge a complaint with the Spanish Data Protection Agency (AEPD) at https://www.aepd.es.
10. Updates to This Policy
MiVPN may update this Cookie Policy when changes occur in the cookies used, in applicable regulations or in third-party providers. Any relevant modifications will be communicated via a notice on the website or through the cookie banner, which will request the user's consent again where required.
The date of the last update is always shown at the top of this document.
11. Contact
For any queries or comments about the use of cookies on MiVPN's websites, please contact us:
- Email: privacy@mivpn.net
- Postal address: Rúa A Pomba 13 1º, 36162 Pontevedra (Pontevedra), Spain