1. Purpose and Scope
1.1 This Cookie & Tracking Technologies Policy (this "Policy") explains which cookies, local storage mechanisms, software development kits ("SDKs") and similar technologies (together, "Tracking Technologies") are used when you access the FixAdmin service, including the web application, the Android and iOS mobile applications, the public marketplace directory, and the public order-tracking pages (together, the "Service").
1.2 This Policy applies to every visitor and user of the Service, including the business customer that holds a Subscription (the "Customer"), the individuals the Customer authorizes to use the Service under its account ("Authorized Users"), and visitors to the public pages of the Service (such as an End Customer using a public order-tracking link). Capitalized terms not defined here have the meaning given in the FixAdmin Terms of Service (the "Agreement"), of which this Policy forms part by reference.
1.3 This Policy should be read together with the FixAdmin Privacy Policy, which describes how personal data is processed, on what legal bases, and how data-subject rights can be exercised.
2. What These Technologies Are
2.1 "Cookies" are small text files placed on your browser or device. The Service also uses browser storage mechanisms that are not cookies but serve comparable purposes: localStorage and IndexedDB (persistent browser storage), sessionStorage (storage cleared when the browser tab or session ends), and, in the mobile applications, SDKs that use device-level storage and identifiers.
2.2 In the tables below, "Duration" is described as: "session" (deleted when the browser session or tab ends), "persistent" (remains until it expires or you delete it), or "set by provider" (the lifetime is determined by the third-party provider and may change; FixAdmin does not control it).
3. Categories of Tracking Technologies We Use
3.1 Essential First-Party Storage
3.1.1 These technologies are set by FixAdmin itself (first party) and are strictly necessary for the Service to function: without them you cannot sign in, stay signed in, or keep your basic preferences. They are not used to track you across other websites.
| Technology / Storage | Provider | Purpose | Platform | Duration |
|---|---|---|---|---|
| Authentication session (Firebase Auth, stored in IndexedDB) | FixAdmin (first party, via Firebase SDK) | Keeps you signed in to your account between page loads and visits | Web | Persistent (until sign-out or storage is cleared) |
| Session heartbeat (localStorage) | FixAdmin (first party) | Detects and manages active sessions of the signed-in user | Web | Persistent |
| Language preference | FixAdmin (first party) | Remembers the interface language you selected | Web, Android, iOS | Persistent |
| Local PIN / biometric preference | FixAdmin (first party) | Stores your device-local preference for PIN or biometric unlock of the app | Web, Android, iOS | Persistent (on your device) |
| WhatsApp connection (OAuth) state (sessionStorage) | FixAdmin (first party) | Protects the WhatsApp Embedded Signup flow against forged requests while the connection is in progress | Web | Session |
| Last searched marketplace location | FixAdmin (first party) | Remembers the last location you searched in the public marketplace so the search can be repeated conveniently. Stored locally on your device only; it is not transmitted to or persisted by FixAdmin's servers on a per-user basis | Web | Persistent (until cleared) |
3.2 Security and Abuse Prevention
3.2.1 The Service uses attestation and anti-abuse technologies to verify that requests come from a legitimate instance of the application and not from bots or automated abuse. These operate on every use of the protected parts of the Service and are necessary to keep it secure.
| Technology / Storage | Provider | Purpose | Platform | Duration |
|---|---|---|---|---|
| reCAPTCHA v3 (used by Firebase App Check) | Google LLC | Distinguishes human use from automated abuse and attests that requests originate from the genuine application; runs continuously in the background (no puzzle is shown) | Web | Set by provider |
| Firebase App Check attestation | Google LLC | Verifies that calls to the Service's backend functions come from the genuine application | Web, Android, iOS | Set by provider |
3.3 Infrastructure
3.3.1 The fixadmin.app website and web application are served through a content delivery and security network, which sets its own technical cookies to route traffic, mitigate attacks, and distinguish legitimate visitors.
| Technology / Storage | Provider | Purpose | Platform | Duration |
|---|---|---|---|---|
| Cloudflare infrastructure cookies (e.g., bot management and load-balancing cookies) | Cloudflare, Inc. | Traffic routing, performance, and protection against malicious or automated traffic on fixadmin.app | Web | Set by provider |
3.4 Functional
3.4.1 These technologies enable specific features of the Service. The Facebook SDK is loaded only when an Authorized User actively starts the WhatsApp Embedded Signup flow; it is not loaded on ordinary browsing of the Service.
| Technology / Storage | Provider | Purpose | Platform | Duration |
|---|---|---|---|---|
| Google Maps JavaScript API | Google LLC | Displays maps and location features (for example, marketplace store locations). Currently loaded when the web application loads | Web | Set by provider |
| Google Maps SDK | Google LLC | Displays maps and location features in the mobile applications | Android, iOS | Set by provider |
| Facebook JavaScript SDK (with cookies enabled) | Meta Platforms, Inc. | Powers the WhatsApp Business Embedded Signup flow that connects the Customer's WhatsApp Business Account. Loaded only when the user initiates that flow | Web | Set by provider |
3.5 Analytics
3.5.1 FixAdmin uses aggregate measurement to understand how the Service is used and to improve it. FixAdmin does not use analytics to build advertising profiles.
| Technology / Storage | Provider | Purpose | Platform | Duration |
|---|---|---|---|---|
| Google Analytics 4 (Firebase Analytics SDK) | Google LLC | Usage measurement — screens viewed, feature usage, aggregate statistics. Mobile: active; web: implemented but not currently collecting (blocked by the site's Content-Security-Policy) | Web, Android, iOS | Set by provider |
| Cloudflare Web Analytics (Insights) | Cloudflare, Inc. | Privacy-oriented, aggregate traffic measurement performed at the network edge for fixadmin.app | Web | Set by provider |
3.6 Diagnostics (Mobile)
| Technology / Storage | Provider | Purpose | Platform | Duration |
|---|---|---|---|---|
| Firebase Crashlytics SDK | Google LLC | Crash and error reporting in the mobile applications, to detect and fix defects. Reports may include the user identifier, the company identifier, and the screen route where the error occurred | Android, iOS | Set by provider |
4. Mobile Device Identifiers; Android Advertising Identifier
4.1 The mobile applications use SDK-generated instance identifiers (such as Firebase installation identifiers and push notification tokens) to deliver the functions described above, including push notifications to Authorized Users.
4.2 Android advertising identifier (AD_ID). The Android application currently includes the AD_ID permission inherited from a bundled SDK. The advertising identifier is not used for advertising; it is being removed from the app packaging.
5. Consent Status
5.1 The Service does not currently display a cookie consent banner. The Tracking Technologies in use are limited to the purposes stated in this Policy.
5.2 Where applicable law requires prior consent for non-essential Tracking Technologies, FixAdmin will implement a consent mechanism for users in those jurisdictions before offering the Service in those markets or, where already accessible, as soon as reasonably practicable. If web analytics measurement is activated, this Policy will be updated before or at activation.
5.3 Essential first-party storage (Section 3.1) and security technologies (Section 3.2) are used on the basis that they are strictly necessary to provide the Service you request and to keep it secure.
6. How You Can Control Tracking Technologies
6.1 Browser settings (web). You can delete or block cookies and site data (including localStorage, sessionStorage and IndexedDB) through your browser's settings. Note that deleting or blocking the essential storage described in Section 3.1 will sign you out and may prevent the web application from functioning.
6.2 Operating-system permissions (mobile). You can manage app-level permissions (including notifications and, on Android, the advertising identifier via the system's ads settings) through your device's operating-system settings.
6.3 Push notifications. Authorized Users can disable push notifications at any time using the toggle in the Profile section of the app, in addition to the operating-system notification settings.
6.4 Blocking or deleting non-essential technologies does not prevent you from using the core Service, although some features (such as maps or the WhatsApp connection flow) depend on the corresponding third-party technology being available.
7. What We Do Not Use
7.1 The Service does not include advertising networks, advertising SDKs, or marketing pixels, and FixAdmin does not sell personal data obtained through Tracking Technologies. If this changes, FixAdmin will update this Policy and, where required, request consent in advance.
8. Third-Party Providers
8.1 The third-party technologies listed in this Policy are operated by their respective providers (Google LLC, Meta Platforms, Inc., and Cloudflare, Inc.), which process data under their own privacy policies. FixAdmin does not control the exact identifiers, cookie names, or lifetimes those providers set, and they may change them from time to time. The role of each provider with respect to personal data is described in the FixAdmin Privacy Policy and the Subprocessor List.
9. Changes to This Policy
9.1 FixAdmin may update this Policy to reflect changes in the Tracking Technologies used or in applicable law. Material changes will be notified in accordance with the Agreement, and the "Last updated" date above will be revised. The current version is always available within the Service.
10. Contact
10.1 Questions about this Policy or about Tracking Technologies used in the Service may be sent to [email protected]. FixAdmin undertakes to respond within thirty (30) calendar days; where Colombian law applies, inquiries (*consultas*) are answered within ten (10) business days and claims (*reclamos*) within fifteen (15) business days, and where the GDPR applies, within one (1) month.
11. Governing Law; Disputes
11.1 This Policy forms part of the Agreement and is governed by the laws of the State of Florida, United States, excluding its conflict-of-laws rules. Any dispute arising out of or relating to this Policy is resolved as set out in the Dispute Resolution section of the Agreement, which also determines venue.
12. Language
12.1 This Policy is drafted in English, which is the official and binding version and prevails in case of any conflict, to the maximum extent permitted by applicable law. The Spanish version published in the application and website is an official courtesy translation. Acceptance is recorded against the document version and language presented to the user.