ASSMA
Cookie policy
Last update: 2026-04-27 · Own technical cookies only
1. Scope
ASSMA uses only own technical or strictly necessary cookies and similar technologies to enable the Site and the platform to work, to manage sessions, to balance load, to keep basic technical preferences and to reinforce security.
ASSMA does not currently use own behavioural advertising cookies, advertising profiles, or analytics cookies that are not exempt under Spanish law, in the baseline version described here.
2. What cookies are
Cookies and similar technologies are small files or identifiers that are stored on or accessed from the user's device to allow the service to work, to remember certain preferences, to manage the session or to gather information about the use of the service.
3. Cookies we use
| Name | Category | Purpose | Duration |
|---|---|---|---|
| XSRF-TOKEN | Technical / security | CSRF protection for authenticated forms and actions. | Session / 2 h |
| assma_session | Technical / necessary | Session identifier. Required for authentication, navigation state and impersonation banner. | Session |
| assma_session_id | Technical / necessary | Links a student with their access session while performing an ASSMA test. Required by the access middleware. | 4 h |
All cookies above are set with Secure on HTTPS, HttpOnly where applicable and SameSite=Lax.
4. Legal basis
These cookies are exempt from consent to the extent that they are necessary for the provision of the service requested by the user or for the communication between the user's device and the network, in accordance with article 22.2 of Spanish Law 34/2002 (LSSI-CE) and the AEPD Cookie Guide.
5. Third parties
ASSMA does not load analytics pixels, advertising pixels or third-party SDKs for its own tracking. The public Site loads the Orbitron font from Google Fonts and may embed a project video from youtube-nocookie.com. These requests are third-party resources and do not set cookies on the ASSMA domain.
If a third-party resource starts using non-exempt cookies or equivalent identifiers, ASSMA must update this Policy and implement the appropriate information and consent mechanism before relying on that resource in production.
6. How to manage cookies
You can set your browser to block or delete cookies. Please note that disabling strictly necessary cookies may prevent some features of the Site or platform from working properly.
7. Changes
If ASSMA introduces analytics cookies that are not exempt or third-party services that require consent, this Policy will be updated before activation and the appropriate information and consent mechanism will be implemented.