Cookie Policy
Information about the use of cookies on our website
On this Website we use first-party and third-party cookies to make the site work (session, security) and — only with your consent — to measure traffic and improve the service.
Non-essential cookies (analytics and third-party) are disabled by default and only activated after your express consent given through the banner. You may accept, reject or configure your choice by category at any time via the "Manage cookies" link in the footer, in accordance with the GDPR, the Spanish LOPDGDD and the AEPD's guidance on cookie use. Continued browsing of the Website does not constitute consent.
Legal basis: art. 22.2 of the Spanish LSSI and arts. 6.1.a and 7 of the GDPR.
Controller Entity
Controller: DEVIL CLUB LLC
Address: 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, USA
Contact: [email protected]
What Are Cookies?
Cookies are small text files that websites install on your device to collect anonymous information about your browsing or to remember your preferences (for example, language, logged-in session or items added to a cart).
Their purpose is to improve the operation and efficiency of the website.
Cookie Inventory and Active Technologies
Below is a verifiable detail of all cookies and similar technologies this Website may activate, their purpose, duration, and whether they process personal data under article 3.1 of the Spanish LOPDGDD. The "Personal" column indicates whether the cookie, by itself or combined with other data, allows direct or indirect identification of a natural person.
1. Technical and functional cookies — consent-exempt (Art. 22.2 LSSI)
| Technical name | Provider | Purpose | Duration | Personal |
|---|---|---|---|---|
devil_token |
Devil Club (first-party) | Authenticated session JWT for the private members' area. HttpOnly, Secure, SameSite=Lax. |
7 days (renewed on login) | Yes |
dc_auth |
Devil Club (first-party) | Session hint (fixed value "1") used to render the authenticated layout before hydration. Contains no personal data. | 7 days | No |
dc_cookie_consent (localStorage) |
Devil Club (first-party) | Records your granular banner choice as a JSON object of the form { necessary: true, analytics: boolean, marketing: boolean, ts: ISO-8601, version: number }. Required to honor your consent by category, to re-prompt if we change the inventory (version), and to avoid showing the banner while your decision remains valid. |
Persistent (until manual deletion or version change) | No |
These cookies are strictly necessary for the operation of the Website and for secure authentication. Disabling them prevents login and may degrade browsing. CSRF protection is applied at the server level when the Origin header is present on state-changing requests (POST, PUT, PATCH, DELETE) and is reinforced by the SameSite=Lax attribute on devil_token; no dedicated CSRF token cookie is used.
2. Analytics cookies — require "Analytics" consent (opt-in)
| Technical name | Provider | Purpose | Duration | Personal |
|---|---|---|---|---|
_ga, _ga_*, _gid |
Google LLC (USA) — via Google Tag Manager | Aggregated traffic analytics (pageviews, duration, source, flow). Pseudonymous identifier combinable with (truncated) IP and user-agent. | _ga: 2 years · _gid: 24 h · _ga_*: 2 years |
Yes |
| GTM container | Google LLC (USA) | Third-party tag orchestrator. Only injected after activating the "Analytics" (or "Marketing") category in the banner. If GTM loads other tags in the future, this inventory will be updated before deployment. | Session / depending on the loaded tag | Yes |
The banner offers symmetric "Accept all" / "Reject all" buttons and a "Customize" entry with granular toggles per category (necessary — always on —, analytics and marketing). From the preferences modal you can "Save selection" with the chosen combination. GTM and associated tags only load if you activate the "Analytics" or "Marketing" category; if both are off, no analytics or advertising script is injected. You can revoke or change your consent at any time from the "Manage cookies" link in the footer. International transfer to the USA is covered by the European Commission's Standard Contractual Clauses (SCCs).
3. Marketing and advertising cookies
No advertising cookies are currently active. If we activate marketing trackers in the future (TikTok Pixel, Google Ads or others), we will update this policy and they will only load after explicit consent in the banner.
4. Embedded third-party content
| Origin | Provider | Purpose | When activated | Personal |
|---|---|---|---|---|
youtube-nocookie.com |
Google LLC (USA) | YouTube embeds on youtube-nocookie.com (privacy-enhanced mode, no cookies until click-to-play). |
Only when you interact with the player | Yes |
Embedded content is loaded lazily and under YouTube's "privacy-enhanced" mode. If you do not interact with it, no third-party cookies are set.
Last tracker audit: April 19, 2026. This inventory is reviewed before each deployment that modifies third-party scripts. Auditable in the source code at src/components/shared/GlobalChrome.tsx and src/app/layout.tsx.
Manage your preferences
You can change your decision at any time. Withdrawing consent is as simple as giving it.
Open the cookie manager: click the "Manage cookies" link in the footer, or click here to open it now.
How to Disable or Delete Cookies
You can configure your browser to block or delete cookies at any time. Note that doing so may affect site functionality or your experience personalization.
See how to manage cookies in the main browsers:
Disable Google Analytics: If you want to disable Google Analytics cookies specifically, you can do so via the official add-on:
https://tools.google.com/dlpage/gaoptout
Updates to the Cookie Policy
DEVIL CLUB LLC reserves the right to modify this Cookie Policy to adapt to legal or technical changes. Material changes will be notified on the Website itself and will take effect upon publication.