Last updated: 26 October 2026 · Consent banner version 1
1. Who is responsible
HD PARTS AND ACCESSORIES, S.L. (trade name Jackye Thunder), NIF/VAT ESB19925114, Pol. Ind. Fortiz, Sector A, 15, 21007 Huelva, Spain — info@jackyethunder.com. This policy explains which cookies and similar technologies www.jackyethunder.com uses, what for, who sets them and for how long. It complements our Privacy Policy.
2. What are cookies
Cookies are small text files that a website stores on your device. Similar technologies (such as local or session storage) work in the same way and are covered by this policy.
3. Your choice
When you first visit the shop a banner lets you accept all, reject all or choose by category (Settings). Rejecting is as easy as accepting. Nothing except the necessary cookies is used until you choose, and scrolling or continuing to browse is not consent.
- Necessary — always active. They do not need consent (art. 22.2 of Spanish Law 34/2002, LSSI) because the shop cannot work without them.
- Analytics — only if you accept. Legal basis: your consent (art. 6.1.a GDPR).
- Marketing — only if you accept. Legal basis: your consent (art. 6.1.a GDPR).
Your choice is stored for 12 months; after that we ask again. We also ask again if the cookie categories change. You can change or withdraw your consent at any time, as easily as you gave it: use the link below, the Cookie settings link at the bottom of every page, or the round cookie button at the bottom-left of the screen.
4. Cookies we use
4.1 Necessary cookies (always active)
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
PrestaShop-… (name ends in a long code) | Jackye Thunder (first party) | Keeps your session: shopping cart, login, language, currency and security token. | 20 days |
PHPSESSID | Jackye Thunder (first party) | Technical session identifier used to show confirmation and error messages after you submit a form and to complete returns from payment pages. It contains no personal data. | Persistent: the server asks for a very long lifetime, which browsers limit to at most 400 days |
jt_consent | Jackye Thunder (first party) | Remembers your cookie choice, the banner version, a random consent identifier and the date, so we do not ask on every page and can prove your consent. | 12 months |
nPedSession | Redsys (card payments, set on our domain) | Card payment processing at checkout. Only set when you reach the checkout. | A few minutes |
__cf_bm, cf_clearance | Cloudflare | Security and bot protection. They are only set if Cloudflare security checks apply to your visit. | 30 minutes (__cf_bm); longer for cf_clearance if a security check is shown |
4.2 Analytics cookies (only with your consent)
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google LLC (Google Analytics 4), set on our domain | Distinguishes visitors to produce aggregated statistics: pages viewed, device type, approximate location, purchases. | 2 years |
_ga_0MPWRJYJYH | Google LLC (Google Analytics 4), set on our domain | Keeps the state of your visit (session) for those statistics. | 2 years |
jt_bc (browser session storage) | Jackye Thunder (first party) | Prevents the “begin checkout” statistic from being counted twice during the same visit. Only written if you accepted analytics. | Until you close the tab |
If you do not accept analytics, no Google Analytics cookie is stored. We use Google Consent Mode: in that case the Google tag may still send a limited, cookie-less signal (page address, browser and device information and IP address) that Google uses only to model aggregated statistics; no identifier is stored on your device.
4.3 Marketing cookies (only with your consent)
At the moment the shop does not set any marketing cookie. If you accept this category we only tell Google that you allow advertising signals (Google Consent Mode: ad_storage, ad_user_data, ad_personalization). If we run Google Ads campaigns in the future, Google may then set advertising cookies such as _gcl_au (90 days); this list and the banner version will be updated before that happens, and you will be asked again.
4.4 Third-party content and payment providers
- YouTube (Google): some product pages embed manufacturer videos using YouTube privacy-enhanced mode (
youtube-nocookie.com), which does not store cookies until you play a video. If you play one, YouTube may set its own cookies (for exampleYSC,VISITOR_INFO1_LIVE); see policies.google.com/technologies/cookies. - Payment providers (Monei, Redsys, SumUp, PayPal): when you choose to pay with them, they may set cookies on their own domains for payment processing and fraud prevention. See their cookie policies.
5. Proof of your consent
To demonstrate that you consented (art. 7.1 GDPR) we keep a log with the date and time, your choice by category, the banner version and the random consent identifier. We do not store your IP address. The log is kept for 3 years.
6. How to manage cookies in your browser
You can also block or delete cookies in your browser settings: Chrome, Firefox, Safari, Edge. Blocking necessary cookies may stop the cart and checkout from working.
7. Your rights and complaints
You can exercise your data protection rights as explained in our Privacy Policy. You may also complain to the Spanish Data Protection Agency (AEPD), www.aepd.es.