Cookies Policy

Last updated: 17 October 2026

In short

This site uses two kinds of cookies: the ones it cannot work without, and analytics ones.
Analytics cookies only load if you accept them. If you decline, neither Google's nor Clarity's code is downloaded — it is not that they load and do nothing, they never reach your browser.
Declining is as easy as accepting: one click, in the same notice, with no hidden menus.
There are no advertising cookies and nothing is shared with advertisers.
You can change your mind at any time from "Cookie preferences" in the footer of any page.

1. What a cookie is

A cookie is a tiny file a website leaves in your browser so it can recognise it next time. They are used for ordinary things — remembering that you are signed in — and also to follow your trail across pages, which is what the law requires you to be asked about.

Out of habit, "cookies" here means any technique for storing things on your device: cookies proper and browser local storage. The law treats them all the same and so do we.

2. Necessary cookies

Without these the site cannot do what you ask it to, so they do not require your consent (Art. 22.2 of Spanish Law 34/2002, second exception). They are not used to track you or to measure anything.

Cookie	Set by	Duration	What it does
`pn_consentimiento`	Pilot Network First-party	12 months	Remembers whether you accepted or rejected analytics cookies, so you are not asked again on every page. It is the cookie that makes it possible to honour your choice.
`pn_idioma`	Pilot Network First-party	12 months	Remembers the language you chose in the selector (ES/EN). Without a choice, the home page opens in your browser's language (Spanish or, otherwise, English); with one, in the language you chose. Only if you use the language selector, choose your account language or sign in.
`pn_cv_borrador`	Pilot Network First-party	Until you press «Start over» or clear the site's data	Browser local storage (not a cookie, but treated the same): keeps the CV builder draft while you type, so you do not lose it when you close the tab. It is not sent to any server on its own. On a shared computer, press «Start over» when you finish. Only if you use the CV builder.
`pn_cv_builder_v2`	Pilot Network First-party	Until you press «Start over» or clear the site's data	Browser local storage: the draft of the 15-template CV builder, so you do not lose it when you close the tab. It is not sent to any server on its own. On a shared computer, press «Start over» when you finish. Only if you use the 15-template CV builder.
`pn_cv_profiles_v1`	Pilot Network First-party	Until you delete them or clear the site's data	Browser local storage: the versions of your CV you keep with «My CVs» inside the builder, in this browser. The ones saved to your account are separate (see the Privacy Policy). Only if you save versions with «My CVs» in the builder.
`sb-<proyecto>-auth-token`	Supabase First-party	30 days, renewed while you use the account	Keeps you signed in. Without it you would have to enter your password on every page. It may appear split into several parts (…-token.0, …-token.1) because the content does not fit in a single cookie. Only if you create an account and sign in.
`sb-<proyecto>-auth-token-code-verifier`	Supabase First-party	A few minutes	Part of the secure sign-in protocol (PKCE): it prevents anyone intercepting the sign-in link from using it. Deleted once sign-in completes. Only during the sign-in process.

The session cookies only exist if you create an account. If you browse without registering, you will only have the one storing your decision about this very notice, if you switch language the one remembering it and, if you use the CV builder, its draft in your browser's local storage.

3. Analytics cookies

These tell us which pages are visited and how the site is navigated, so it can be improved. They are only installed if you press "Accept". Until you do, these tools' code is not even downloaded.

Cookie	Set by	Duration	What it does
`_ga`	Google Analytics 4 (Google LLC) Third-party	Up to 2 years	Distinguishes visitors so we can count how many different people visit, rather than how many times a page is reloaded.
`_ga_G-7BLRGR23LT`	Google Analytics 4 (Google LLC) Third-party	Up to 2 years	Stores the Google Analytics session state for this particular website.
`_clck`	Microsoft Clarity (Microsoft Corporation) Third-party	1 year	Links visits from the same browser within Clarity.
`_clsk`	Microsoft Clarity (Microsoft Corporation) Third-party	1 day	Groups consecutive page views into a single session.
`CLID`	Microsoft Clarity (Microsoft Corporation) Third-party	1 year	Identifies the first visit from this browser. Set from the clarity.ms domain.
`MUID`	Microsoft Corporation Third-party	Up to 13 months	An identifier Microsoft uses across its services. Set by Clarity, not by this website.
`ANONCHK`	Microsoft Corporation Third-party	10 minutes	Indicates whether the MUID identifier may be used for measurement.

Google Analytics 4

Counts visits and page views. It is set up with Google's consent mode, so no identifiable data is sent until you accept, and the IP address is truncated before storage.

Microsoft Clarity

Produces heatmaps and records mouse movement to show where people get stuck. Form content is masked: what you type into a field is neither recorded nor transmitted. Your account pages are not recorded either.

4. What we measure without cookies

Part of our measurement uses no cookies, which is why you are not asked about it: how many times each posting was viewed and its apply button pressed, how many times each airline's feedback was viewed, how many times each file was downloaded, and how many entries the study material Drive had.

These are counts recorded on our own server. No IP address, no cookie and no identifier that would reveal that two clicks came from the same person is stored. With no personal data there is nothing to consent to; and it works the same even if you decline everything else.

This is deliberate. Measuring it with Google would mean losing the clicks of everyone using an ad blocker — on a site like this one, a lot of people — and we would get worse data in exchange for a greater intrusion.

5. Changing your mind

Your decision is stored for 12 months. After that you are asked again, because the cookie list may have changed in a year.

In the meantime you can change it at any time from the "Cookie preferences" link in the footer. The same notice opens and you can withdraw what you had accepted: withdrawing consent is as easy as giving it, as Article 7(3) GDPR requires.

If you withdraw consent, we stop loading those tools immediately. Cookies already set are deleted when the page reloads; those Google or Microsoft set on their own domains can be removed from your browser, as explained below.

6. From your browser

Regardless of what you decide here, your browser lets you see and delete every cookie:

Chrome: Settings → Privacy and security → Cookies
Firefox: Settings → Privacy & Security → Cookies
Safari: Preferences → Privacy → Manage Website Data
Edge: Settings → Privacy → Cookies

And at the source: Google Analytics opt-out add-on and Microsoft privacy statement.

Deleting the necessary cookies will sign you out and bring the cookie notice back. Nothing else happens: declining analytics limits no feature of the site. There are no cookie walls here.

7. Why you are asked

Because three rules require it, and say how:

Article 22.2 of Spanish Law 34/2002 (LSSI-CE): installing non-essential cookies requires prior, informed consent.
Regulation (EU) 2016/679 (GDPR), Articles 4(11) and 7: consent must be free, specific, informed and unambiguous, and withdrawing it must be as easy as giving it.
The AEPD's cookie guidance: continuing to browse or closing the notice is not consent; declining must be at the same level and take the same number of clicks as accepting; and content cannot be blocked from those who decline.

That is why the notice puts accept and decline side by side, the same size, on the first screen, and why you can use the whole site without accepting anything.

8. Content from other sites

Some pages show things that are not ours: images from Wikimedia or partner schools, or a map. Since 28 September 2026 we handle them like this, so that your IP address does not go to other websites unless you decide so:

Fonts: served from this same domain. They are no longer requested from Google.
Images, stylesheets and fonts from other sites (Wikimedia, JetPhotos, cdnjs and the websites of some schools and partners): our server requests them and hands them to you. The original site receives nothing of yours.
Google Maps (some school pages): the map does not load until you press "Show the map". When you do, your browser connects to Google, which receives your IP and may use its cookies under its own policy.

What still loads directly when the page opens: Pilot Network's own tools hosted on pilotnetworkspain.github.io (GitHub) and a partner's tool on the assessment preparation page (pilotassessments.com), because they are the very content of those pages. GitHub and that partner receive the request with your IP.

9. Changes

If a cookie is added or removed, this table is updated and consent is requested again before anything new is installed. For any questions: pilotnetworkspain@gmail.com.