MUVAWAY · Legal
Cookies Policy
Last updated: 21 September 2026
1. What is a cookie
A cookie is a small text file that a website stores on your device when you visit it. Cookies allow the website to remember information about your visit, such as preferences or session details. Some cookies are strictly necessary for the site to work, others help us understand how the site is used or enable third-party services.
This Cookies Policy explains which cookies we use on muvaway.com, why we use them, and how you can manage them. It complements our Privacy Policy.
2. Who is the controller
The controller responsible for the use of cookies on this website is Only Apartments Real Estate S.L. (CIF B26926378). Business and contact address: Carrer de Monsenyor Palmer, 1, 07014 Palma, Illes Balears, Spain.
3. Legal basis
We use cookies in accordance with Article 22.2 of the Spanish Law 34/2002 (LSSI-CE) and the General Data Protection Regulation (EU) 2016/679. Strictly necessary cookies do not require your consent. All other cookies are only set after you give your consent and may be withdrawn at any time.
4. Categories of cookies we use
The cookies used on this website fall into the following categories:
Strictly necessary cookies
Required for the basic operation of the website, such as signing in to your account, remembering your cookie choice and a partner code you arrived with. They do not require consent; the full list is in section 5. Our public forms are additionally protected by Cloudflare Turnstile, a privacy-preserving bot check that runs without advertising cookies and processes technical connection data only.
Functional / third-party cookies
Property listings and the neighbourhood search can embed Google Maps (provided by Google Ireland Ltd.). The map and its connection to Google are blocked until you allow the “Maps” category. Address suggestions in the owner form are routed through our own server (Google Places as our processor) — your browser never contacts Google, only the typed address text is forwarded, so no consent is required for them. Until then, a local placeholder lets you open the cookie settings without contacting Google.
Form-handling services
Contact, sell and viewing requests are validated and processed on our server. We use Resend to send the resulting notification to our team; no advertising cookie is required to submit a form.
Analytics and advertising
Only after you accept non-essential services do we load Microsoft Clarity to understand website usage and Google Ads to measure advertising conversions. If you reject them, these scripts are not loaded. Vercel Web Analytics and Vercel Speed Insights also start only after your consent and provide aggregated audience and performance measurements without setting analytics or advertising cookies.
5. Cookies and storage we use
These are all cookies and browser storage entries this website uses, with their purpose and duration:
| Name | Provider | Purpose | Duration | Consent |
|---|---|---|---|---|
| sb-…-auth-token | Supabase | Keeps you signed in to your account (Supabase) | Until you sign out | No |
| muvaway_ref, muvaway_ref_on | MUVAWAY (own) | Keeps the partner code from a partner link so the requested discount reaches your enquiry. The code is shown in the enquiry form and can be removed there; the partner is only credited when you send the enquiry with the code | 90 days | No |
| mw_intern | MUVAWAY (own) | Team devices only: excludes them from view statistics | 2 years | No |
| muvaway:cookie-consent, …:date, …:categories, …:id, muvaway:monitoring-consent-version (local storage) | MUVAWAY (own) | Stores your cookie choice per category, when you made it and a random ID so we can prove your choice | 12 months | No |
| Drafts (local storage): muvaway:listing-draft:v1, muvaway:chat:v1:…, muvaway:season-inquiry:… | MUVAWAY (own) | Keeps unsent form, chat and enquiry drafts on your device | Until sent or deleted | No |
| Session storage: muvaway:qr-herkunft, muvaway:offene-einreichung, mw-konto-nach-profil, muvaway:account-area, muvaway:catalogue-scroll-reset | MUVAWAY (own) | Navigation within the current visit; the QR/link source of an owner submission | Until the tab is closed | No |
| muvaway_content, muvaway_vid | MUVAWAY (own) | Measures which of our content links led to an enquiry | 30 days | Yes |
| muvaway:qr:… (session storage) | MUVAWAY (own) | Counts a QR code scan once | Until the tab is closed | Yes |
| _clck, _clsk (Microsoft Clarity) | Microsoft | Usage analysis | 1 year / 1 day | Yes |
| _gcl_… (Google Ads) | Conversion measurement | 90 days | Yes | |
| Google Maps | Loads the map | Set by Google | Yes | |
| ph_… (PostHog, if enabled) | PostHog | Technical error diagnostics and anonymous usage statistics | 1 year | Yes |
6. How to manage or disable cookies
You can accept, reject or delete cookies at any time directly through your browser settings. Most browsers allow you to:
- view which cookies are stored and delete them individually,
- block cookies from specific websites or all third-party cookies,
- delete all cookies when the browser is closed.
You can withdraw or change your choice at any time via Cookie settings in the footer. There you can allow each category separately: Maps (Google Maps), Statistics (Vercel, Microsoft Clarity, PostHog error diagnostics, measurement of our content links and QR codes), Session recording (PostHog, only together with statistics, off by default) and Advertising (Google Ads). To be able to prove your choice (Art. 7(1) GDPR), we store on our server the random ID from your browser, the categories you chose, the policy version, the language and the time — no IP address and no account.
Please note that disabling strictly necessary cookies may affect the proper functioning of certain parts of the website.
7. International transfers
Some of the third-party providers involved (Google, Microsoft, Vercel, Cloudflare and Resend) may process data outside the European Economic Area. In those cases, the transfer of your data is protected by the appropriate safeguards required by the GDPR, such as the European Commission's Standard Contractual Clauses.
8. Changes to this policy
We may update this Cookies Policy to reflect changes in the technologies we use or in applicable law. The latest version will always be available on this page, with the "Last updated" date at the top.
9. Contact
For any question regarding this Cookies Policy or our use of cookies, please write to us at info@muvaway.com.
Error diagnostics, usage statistics and session recordings with PostHog
When enabled, we use PostHog Cloud EU for technical error diagnostics and — with your consent to “Statistics” — for the usage statistics of this website. We then collect pages viewed and time spent, buttons and links clicked, where you came from (search engine, campaign, referring site), an approximate location derived from your IP address (country, region, city), device and browser, plus a random identifier that lets a visit be recognised later. Addresses are cleaned first: access tokens, listing and account identifiers and search terms are removed; only campaign parameters remain. For portal, handover and exposé links we send no address at all. Names, email addresses, messages, form input and document contents never reach PostHog. With your additional consent to “Recording” we record sessions, meaning clicks, scrolling and page changes: input fields always stay masked, file uploads and areas marked as sensitive are not recorded, and account, portal and handover pages are excluded entirely. Server-side errors are sanitized and captured without identifying a person. The CRM runs error diagnostics only. You can withdraw statistics and recording at any time in the cookie settings.