Cookie Policy
Quotanda · Last updated: October 23, 2026
1. What are cookies?
Cookies are small files that a website stores in your browser when you visit it. They remember your preferences and, depending on their type, measure how the site is used. This policy also covers equivalent technologies, such as the browser's local storage (localStorage).
This policy applies to all visitors to quotanda.com. In section 7 below you will find the responsible entity, legal basis, your rights and the competent authority for your region.
2. Which cookies do we use?
Technical or strictly necessary
These do not require your consent because they are essential to remember your cookie choice.
| Name | Purpose | Provider | Duration |
qt_cookies |
Stores whether you accepted or rejected analytics cookies. It is not a cookie: it lives in your browser's localStorage, an equivalent local storage. | Quotanda (first party) | No expiry: it stays until you delete it from your browser or use "Cookie settings". |
Analytics
These are set only if you click "Accept" in the cookie notice. If you reject or do not answer, none are loaded.
| Name | Purpose | Provider | Duration |
_ga |
Distinguishes unique users to measure visits and site usage (Google Analytics, via Google tag GT-55XGVWL). | Google Ireland Limited / Google LLC | 2 years (Google default, configurable) |
_ga_<id> |
Keeps the Google Analytics session state. | Google Ireland Limited / Google LLC | 2 years (Google default, configurable) |
_hjSessionUser_1606299 |
Anonymously identifies the visitor to analyse behavior on the site (heatmaps and session recordings). | Hotjar Ltd (Malta) | About 1 year |
_hjSession_1606299 |
Keeps the data of the current Hotjar session. | Hotjar Ltd (Malta) | About 30 minutes |
We do not use advertising cookies or third-party marketing cookies. Hotjar durations are approximate and set by the provider; they may change.
3. Prior consent for all visitors
We ask for your consent before setting analytics cookies for all visitors, regardless of the country you browse from. No analytics tool (Google Analytics or Hotjar) loads until you click "Accept". If you reject or do not respond, the site works the same.
4. How to accept, reject or withdraw consent
- On your first visit you will see a notice with "Accept" and "Reject" buttons, given equal prominence.
- To change your mind, click "Cookie settings" in the footer of any page: your choice is cleared and the notice appears again.
- If you had accepted and now reject, we delete the analytics cookies and reload the page so they stop running.
5. How to delete cookies in your browser
You can also block or delete cookies from your browser settings:
If you clear the site's storage, the qt_cookies preference is lost too and you will be asked again.
6. International transfers
Google may process analytics data outside your country of residence, including the United States. For visitors in the European Economic Area and the United Kingdom, transfers to the United States rely on the safeguards required by the GDPR and the UK GDPR: Google LLC is certified under the EU-U.S. Data Privacy Framework (with the UK Extension), so these transfers rely on the European Commission's adequacy decision and, additionally, on the standard contractual clauses included in Google's data processing terms. Hotjar Ltd. (Malta) acts as a processor under its data processing agreement and stores data in Amazon Web Services data centers in Ireland (EU). When any of its sub-processors handles data outside the European Economic Area, the transfer relies on the standard contractual clauses approved by the European Commission.
For visitors from other regions, these transfers are made with the same contractual safeguards described above.
7. Controller, legal basis, rights and complaints by region
Open the section for your place of residence. Entity details match our Privacy policy. Quotanda has not appointed a data protection officer. For any question about privacy or this policy, email support@quotanda.com with the subject "Privacy".
European Union and United Kingdom
Controller and contact
The data controller is Quotanda Loans, S.L., CIF B-65979890, Calle d'Aribau, 168, 1-1, 08036 Barcelona. Contact us at support@quotanda.com. If you reside in the United Kingdom, the controller is Quotanda (UK) Ltd, 11 The Terrace, London, SW13 0NP (uksupport@quotanda.com).
Legal basis
Analytics cookies are set only with your consent (Art. 22.2 of Spain's LSSI and Art. 6.1(a) GDPR; for UK visitors, the UK GDPR and PECR). You can withdraw it at any time without affecting what was done before. Technical storage relies on our legitimate interest in remembering your choice.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to support@quotanda.com (or uksupport@quotanda.com if you live in the United Kingdom). We will respond within 30 days.
Authority to complain to
The Spanish Data Protection Agency (www.aepd.es), the authority in your EU country of residence or, if you live in the United Kingdom, the ICO (www.ico.org.uk).
United States and Canada
Controller and contact
Quotanda LLC, a Delaware limited liability company, United States. Contact address: Calle Sirenas #36, interior 401, Colonia Infonavit Iztacalco, Alcaldía Iztacalco, C.P. 08900, Mexico City, Mexico. Email: support@quotanda.com.
Applicable model
The United States has no general federal cookie law. Some state privacy laws, such as California's (CCPA/CPRA), regulate collection through cookies and similar technologies. The CCPA applies to businesses with annual gross revenue above US$26,625,000 (the amount adjusted by the CPPA effective January 1, 2025), or that buy, sell or share the data of 100,000 or more consumers or households, or that derive at least 50% of their revenue from selling or sharing personal information. Quotanda LLC does not currently meet these thresholds. We still apply here the same prior-consent model described in section 3. We use Google Analytics for statistical purposes only: we do not enable its advertising features (such as Google Signals), we do not sell personal information or share it for cross-context behavioral advertising, and we do not use advertising cookies.
In Canada, personal data processing is governed by PIPEDA (the Personal Information Protection and Electronic Documents Act), which requires meaningful consent for these technologies, and in Quebec by the Act respecting the protection of personal information in the private sector. Our model (nothing loads until "Accept") is designed to meet the strictest standard.
Your rights
Depending on your state of residence, you may have the right to know what data we collect and how we use it, to delete it, to correct it, and to opt out of the "sale" or "sharing" of your data. We will not discriminate against you for exercising these rights. Send your request to support@quotanda.com with your full name, state of residence and the right you wish to exercise. We will acknowledge receipt within 10 business days and respond within 45 days. If you live in Canada, you can request access to and correction of your data by writing to the same address.
Authority to complain to
The Federal Trade Commission (ftc.gov); if you live in California, the California Privacy Protection Agency (cppa.ca.gov); or your state Attorney General; if you live in Canada, the Office of the Privacy Commissioner of Canada (priv.gc.ca) and, in Quebec, the Commission d'accès à l'information (cai.gouv.qc.ca).
Mexico and the rest of the world (Latin America)
Controller and contact
Quotanda México, S.A.P.I. de C.V., Sirenas #36 int. 401, Col. Infonavit Iztacalco, Alcaldía Iztacalco, C.P. 08900, Mexico City. Contact: support@quotanda.com.
Mexico
Mexico's new Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), published in the Diario Oficial de la Federación on March 20, 2025, requires the controller to inform you through a privacy notice about how it processes your data. This policy explains which tracking technologies we use and how to disable them: analytics cookies are set only with your consent and you can withdraw it at any time (sections 3 and 4).
You have the rights of access, rectification, cancellation and objection (ARCO), and the right to revoke your consent. Exercise them by writing to support@quotanda.com. The controller must communicate its determination within 20 days of receiving the request (Art. 31 LFPDPPP). You can also use the request form on our ARCO rights page (available in Spanish).
Authority: after INAI's dissolution, the law defines the Secretaría Anticorrupción y Buen Gobierno (www.anticorrupcion.gob.mx) as the "Secretaría", and INAI's powers in this area are transferred to it.
Colombia
Under Law 1581 of 2012, processing your data requires your prior, express and informed authorization. You have the right to know, update, rectify and delete your data, and to revoke the authorization. You can exercise them at support@quotanda.com. Authority: Superintendencia de Industria y Comercio (SIC, www.sic.gov.co).
Chile
Law 19.628 currently applies. Law 21.719, the new personal data law, was published in the Diario Oficial on December 13, 2024 and is scheduled to take effect on December 1, 2026; it creates the Agencia de Protección de Datos Personales as the authority. Meanwhile, we apply the same prior-consent standard as the rest of the site.
Rest of Latin America
We apply the same prior-consent standard and respect the rights recognized by the local law of your country.
8. Changes to this policy
We will update this policy if the cookies we use change. The date of the last update appears at the top of the document.