Cookies policy.

Last updated: 05 January 2026

Entity responsible: Bodhi Production SL Avenida de Moya 6 35100 San Bartolomé de Tirajana Las Palmas, Spain Email: [email protected] CIF: B22760565

1. Objective

We are committed to protecting your privacy and personal data. This Cookie Policy explains how Cyber Academy (operated by Bodhi Production SL) uses cookies on its website in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish data protection laws (LOPDGDD).

2. Scope

This policy applies to all websites operated under the Cyber Academy brand and associated domains that use cookies or similar technologies to collect information about visitors.

3. Definitions

• Cookie: A small file stored on your device when you visit a website.
• First-party cookies: Set by the Cyber Academy website.
• Third-party cookies: Set by external services integrated into our site.
• Session cookies: Temporary cookies that expire when you close your browser.
• Persistent cookies: Remain on your device for a set period or until manually deleted.
• Similar technologies: localStorage, sessionStorage and other client-side storage mechanisms that behave like cookies for the purposes of this policy.

4. Legal basis for use of cookies

• Strictly necessary cookies: Based on legitimate interest under GDPR Article 6(1)(f). These are essential for the website's basic functionality.
• Analytics and functionality cookies: Used only with your explicit consent (Article 6(1)(a)). You may manage your preferences via our cookie banner or browser settings.
• Marketing cookies: Currently inactive. Will only be enabled with your explicit consent (Article 6(1)(a)) if and when we add marketing tools to the site.

5. Use of cookies and purpose

When you visit our site, you will be shown a cookie banner. Depending on your choices, we may use the following types of cookies:

5.1 Strictly necessary

Required for the website to function. They help with:

• Remembering your language preference (NEXT_LOCALE cookie set by the routing layer).
• Remembering your light/dark theme choice (stored in localStorage, not a cookie).
• Storing your consent preferences themselves (the ca:consent key in localStorage so we don't ask you again on every visit).
• Ensuring service security and CSRF protection on form submissions.

You cannot opt out of these as the site will not work without them.

5.2 Analytics (opt-in)

Used to collect anonymised data about how the website is used. With your explicit consent, we load Fathom Analytics, a privacy-friendly service that:

• Does not set tracking cookies on your device.
• Does not fingerprint visitors.
• Does not share data with advertisers.
• Aggregates anonymous traffic data so we can understand which pages are useful and which need improvement.

You can disable analytics at any time from the cookie banner (reopen it via the Cookie settings link in the footer).

5.3 Marketing (currently inactive)

We do not currently run any marketing or advertising cookies. If we add a newsletter tracking pixel, an ad pixel or any similar tool in the future, you will be asked for explicit consent through the cookie banner before it loads.

5.4 Third-party services activated only by your actions

Some integrations only set cookies on their own domains when you choose to interact with them. They are not loaded by default:

• Stripe (when you click "Buy" on a course): Stripe Checkout opens on stripe.com and may set cookies on that domain for fraud prevention and session continuity. These are governed by Stripe's own cookie policy.
• Mailchimp (when you submit the newsletter or contact form): your email address is sent to Mailchimp for list management. Mailchimp may set tracking cookies in their emails if you click on links inside them. Their policy is at mailchimp.com/legal/cookies.
• TidyCal (when you book a discovery call): the booking widget may set its own cookies. See their privacy policy at tidycal.com.

6. Consent

All cookies and similar technologies except those strictly necessary require your active consent. Consent is collected via the cookie banner when you first visit the site. You can withdraw or update your consent at any time by clicking Cookie settings in the footer of any page, or by adjusting your browser settings.

7. International data transfers

Some third-party providers process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs)
• Data processing agreements with each processor
• Technical protections such as encryption in transit and access controls

8. How to delete or block cookies

You can delete or block cookies at any time using your browser's settings. However, please note that:

• Blocking strictly necessary cookies may impact your experience or break the site entirely.
• Disabling cookies may affect the functionality of certain services.

For guidance, refer to these browser-specific cookie management links:

• Chrome
• Firefox
• Safari
• Microsoft Edge

9. List of cookies and similar technologies

10. Changes to this policy

We may revise this Cookie Policy from time to time. Any changes will be posted on this page with an updated effective date. Material changes will be clearly communicated to users.

11. Contact

If you have questions about this Cookie Policy, or how we use cookies, please contact:

Cyber Academy Email: [email protected] Address: Avenida de Moya 6, 35100 San Bartolomé de Tirajana, Las Palmas, Spain