Cookie Policy
Cookie Policy — Villarreal CF Official Store
This is a translation of the Spanish original, provided for information purposes. In the event of any discrepancy, the Spanish version shall prevail.
Last updated: 17 August 2026
Controller: VILLARREAL CLUB DE FÚTBOL, S.A.D. (Tax ID A12362927), Camino Miralcamp 128, 12540 Vila-real (Castellón), Spain. Contact: retail@villarrealcf.es · +34 964 524 921. Data protection: rgpd@villarrealcf.es.
WHAT ARE COOKIES?
Cookies are small files placed on the hard drive or browser of a computer, tablet, smartphone or equivalent internet-enabled device. They help personalise the services of the website owner, make navigation and usability easier, obtain aggregate information about visitors, enable multimedia content to play, allow interaction between the user and the website, and enable security tools, among other things.
LEGAL BASIS: WHEN DO WE ASK FOR YOUR CONSENT?
In accordance with Article 22(2) of Spanish Act 34/2002 (LSSI) and Regulation (EU) 2016/679 (GDPR):
- Strictly necessary (technical) cookies, required to provide the service you request, do not require consent.
- All other cookies — preference, analytics, advertising and behavioural advertising cookies — are only placed after you have given your consent.
- You can withdraw your consent at any time, as easily as you gave it, using the cookie icon that remains visible in the store. Withdrawing it does not affect the lawfulness of earlier processing.
- Your choice is stored for a maximum of 365 days, after which we will ask for your consent again.
- Refusing non-technical cookies does not prevent you from browsing or shopping in the store.
WHAT TYPES OF COOKIES ARE THERE?
By who manages them:
- First-party cookies: sent to the user's device from equipment or a domain managed by the publisher itself.
- Third-party cookies: sent from equipment or a domain managed by an external entity.
By how long they last:
- Session cookies: deleted when the browser is closed.
- Persistent cookies: stored for a defined period.
By purpose:
- Technical cookies: necessary for the basic operation of the website.
- Preference cookies: remember user settings such as language.
- Analytics cookies: allow user behaviour to be tracked.
- Advertising cookies: manage advertising spaces.
- Behavioural advertising cookies: store information about browsing habits in order to show personalised advertising.
WHICH COOKIES DO WE USE?
| Name | Provider | Type | Purpose | Duration | Transfer outside the EU |
|---|---|---|---|---|---|
| cart | Shopify Inc. | First-party / Technical | Stores the contents of the shopping cart. | 2 weeks | Yes, Shopify Inc. (USA) |
| secure_customer_sig | Shopify Inc. | First-party / Technical | Keeps the authenticated customer session. It is needed so that you do not have to log in again on every visit. | 20 years | Yes, Shopify Inc. (USA) |
| _tracking_consent | Shopify Inc. | First-party / Technical | Stores your cookie consent preferences. | 1 year | Yes, Shopify Inc. (USA) |
| keep_alive | Shopify Inc. | First-party / Technical | Keeps the shopping session alive when changing region. | 30 minutes | Yes, Shopify Inc. (USA) |
| localization | Shopify Inc. | First-party / Preferences | Remembers the selected country and language. | 1 year | Yes, Shopify Inc. (USA) |
| _shopify_y | Shopify Inc. | First-party / Analytics | Uniquely identifies the visitor for store statistics. | 1 year | Yes, Shopify Inc. (USA) |
| _shopify_s | Shopify Inc. | First-party / Analytics | Records the visitor's active session for statistical purposes. | 30 minutes | Yes, Shopify Inc. (USA) |
| _shopify_fs | Shopify Inc. | First-party / Analytics | Detects whether this is the visitor's first session. | 1 year | Yes, Shopify Inc. (USA) |
| _shopify_sa_p / _shopify_sa_t | Shopify Inc. | First-party / Analytics | Attribution of the visit to its source (campaign parameters and timestamp). | 30 minutes | Yes, Shopify Inc. (USA) |
| _landing_page / _orig_referrer | Shopify Inc. | First-party / Analytics | Record the landing page and the referring site. | 2 weeks | Yes, Shopify Inc. (USA) |
| _ga | Google LLC | Third-party / Analytics | Distinguishes users in Google Analytics 4. | 2 years | Yes, Google LLC (USA) |
| _ga_* | Google LLC | Third-party / Analytics | Maintains session state in GA4. | 2 years | Yes, Google LLC (USA) |
| _gcl_au | Google LLC | Third-party / Advertising | Links the conversion to a click on a Google Ads advert (conversion linker). | 3 months | Yes, Google LLC (USA) |
| _fbp | Meta Platforms Inc. | Third-party / Behavioural advertising | Identifies browsers in order to measure, optimise and build audiences for Meta campaigns (Facebook/Instagram). | 3 months | Yes, Meta Platforms Inc. (USA) |
| _fbc | Meta Platforms Inc. | Third-party / Behavioural advertising | Stores the click identifier from Meta adverts. | 2 years | Yes, Meta Platforms Inc. (USA) |
| pandectes_* | Pandectes | Third-party / Technical | Stores the user's cookie consent preferences. | 365 days | No |
| moose_* | Moose | Third-party / Technical | Manages the customer support chat session. | Session | No |
| planet_* | Planet | Third-party / Technical | Manages the promotions and discounts applied in the store. | Session | No |
| sa_sso_* | Sports Alliance / Twocircles | Third-party / Technical | Manages the user's SSO authentication session with their Villarreal CF account. | Session | Yes, Sports Alliance (EU) |
HOW TO MANAGE COOKIES
The first time you visit the store we show you a banner where you can accept or reject non-technical cookies.
After that, the cookie icon remains visible at all times in the bottom left corner of the screen. From there you can reopen the consent panel at any time to review, change or withdraw your choice.
Please note that rejecting certain cookies may affect your shopping experience, although it will not prevent you from browsing or buying.
You can also disable cookies from your browser settings:
Privacy policies of the third parties mentioned: Shopify · Google · Meta.
INTERNATIONAL DATA TRANSFERS
Some of the cookie providers listed in the table above are located outside the European Economic Area (EEA), mainly in the United States. These transfers are made with the appropriate safeguards established by the GDPR, such as the Standard Contractual Clauses approved by the European Commission or the EU-US Data Privacy Framework.
FURTHER INFORMATION
To find out how we process your personal data and what rights you have, see our Privacy Policy. You may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
UPDATES TO THIS POLICY
This policy may be updated when new tools are installed in the store or when the cookies used change. We recommend reviewing it periodically.
