Content reviewed: · 1.0
Marruecosguia and your privacy contact
Marruecosguia is the name of this website and the brand used to present travel information and enquiries about Morocco. It is not, by itself, verification of the operator's legal identity or status.
The website operator's full legal identity has not been verified for this notice.
The operator's postal address has not been verified for this notice.
For privacy enquiries and rights requests, contact info@marruecosguia.com.
Whether an EU representative or data protection officer is applicable, and any corresponding contact details, has not been confirmed in this notice. You can use the privacy email below for enquiries and rights requests.
Your choices
Accept allows analytics only. Reject leaves analytics off. Customize lets you save an analytics choice; essential functionality remains available. No advertising category is enabled. Closing the panel or continuing to browse does not grant consent. The footer's Cookie preferences control lets you change your choice, including withdrawal.
Choices belong to this browser and origin, not all devices. If storage is unavailable, an explicit choice can last in memory for this tab; reload can ask again. A cleared, malformed or expired record is treated as no consent.
Cookies and similar storage
This inventory describes the website configuration. Browser limits, vendor behavior and existing cookies can affect actual lifetimes. localStorage is similar storage, not an HTTP cookie.
| Storage | Purpose and provider | Duration / choice |
|---|---|---|
| marruecosguia-consent-v1 (localStorage) | This website: analytics choice, version and time | Choice honored for 180 days; record remains until overwritten or cleared. Essential. |
| NEXT_LOCALE (cookie) | This website / next-intl: language preference | Session cookie under current configuration. Essential preference storage. |
| _ga and _ga_* (cookies) | Google Analytics: pseudonymous visitor/session measurement | Configured for 180 days without rolling renewal; host-only, path /. Only after analytics consent. |
| marruecosguia-support-v1:* (localStorage) | This website: hashed submission reference, signed token and accepted status to avoid duplicate support email | No automatic client-side expiry; browser/site-data clearing removes it. Essential for requested support delivery. |
| Supabase authentication cookies (sb-…) | Staff authentication/session refresh | Staff sessions only; actual expiry depends on authentication settings and has not been verified for this inventory. Essential. Not installed by the public content reader. |
Google Analytics and consent
The tag is blocked until explicit analytics consent. Before it loads, all four Consent Mode v2 states default to denied; only analytics_storage is then granted. Advertising consent remains denied. The site sends no denied-consent analytics pings before acceptance.
The tag runs in a removable empty same-origin frame. This limits automatic listeners' access to the page's forms and links; it is not a security sandbox against the trusted provider. Manual events use sanitized categories and exclude form contents and URL parameters. See the Privacy Policy for event meanings and data recipients.
Withdrawal and browser controls
Rejecting or withdrawing stops the tag and removes accessible _ga / _ga_* cookies. It does not recall already transmitted requests, erase Google-side data, remove every third-party cookie, or remove essential storage. Browser settings can clear cookies and site storage, including the stored consent choice; this can sign staff out and remove saved preferences/deduplication references. Follow your browser's help for these controls.
Separate retention periods
The event/user-data retention setting in the Google Analytics account has not been verified for this policy. The website's 180-day analytics cookie configuration and consent-choice validity do not establish Google's data retention or guarantee deletion after 180 days. Withdrawal stops future site analytics; requests concerning previously collected data can be sent to the privacy contact.
The 180-day choice-validity period is not a guarantee that localStorage self-deletes or that Google-side data is erased after 180 days. Support token validity is 23 hours, while the browser receipt remains until overwritten or cleared. We do not describe these records as anonymous merely because they use hashes or pseudonymous identifiers.
Recipients and international processing
Contact Support sends the details you submit through Resend to the site's support mailbox. Resend handles email delivery; the mailbox provider also processes the resulting email. Hosting, infrastructure and security providers can process connection metadata needed to operate the website. The website uses Supabase for content/staff access and Cloudflare R2 for uploaded images.
With analytics consent, Google receives analytics identifiers and technical/usage information. Using WhatsApp involves WhatsApp's own service and privacy terms. Clicking an ordinary external link opens that provider's service; it does not authorize our Google Analytics tracking.
These services can involve processing outside Spain or the European Economic Area. The actual contracted entities, processing countries, provider roles and applicable international-transfer safeguards have not been verified for this notice. We do not claim EU-only storage or a particular adequacy decision, contractual safeguard or certification. The provider notices linked below describe their services; they do not prove which arrangements apply to this website. You can ask the privacy contact for information about recipients and transfers.
Questions and rights
For privacy questions and rights requests, email info@marruecosguia.com. The Privacy Policy explains rights, withdrawal and complaints to the competent supervisory authority, including the AEPD where applicable.