1. Controller and scope
QuantumDrive, Sociedad Limitada, NIF B-75303388, Urb. Veneziola s/n, Edif. 4, Bajo 4, 30380 San Javier (Murcia), España. Contact: privacy@quantumdriveev.com. This information covers cookies, local storage, pixels, SDKs and identifiers on the website, the web app and the app. The controls available vary between surfaces.
2. Purposes and choices
Strictly necessary technologies enable authentication, security, remembering choices and providing requested features. Non-essential analytics and advertising require an informed and separate choice. Merely browsing or closing the notice does not amount to acceptance. Microphone permission, location or ATT do not replace consent for each purpose.
Google Analytics 4 and PostHog measure browsing, interaction, device, campaigns and errors. Session/account identifiers and hashed emails are not anonymous data. Meta is involved through its SDK, pixels on certain pages and a documented PostHog → Meta Conversions API destination for advertising attribution and measurement. Its events and identifiers must be verified separately.
3. Observed inventory
| Technology / provider | Purpose and scope | Retention and limits |
|---|---|---|
| qd_consent — QuantumDrive, localStorage | Analytics/marketing preferences, version and date of the main website's panel | Remains in the browser until deleted or replaced; the current code does not apply automatic date-based expiry. |
| Authentication and settings — QuantumDrive/Firebase | Session and requested features | Depends on session status, browser and service; clearing storage may sign you out. |
| PostHog — SDK and local storage | Events, identifiers, campaigns and diagnostics; configuration differs by surface | Retention periods for events and profiles in the project must be confirmed; no unverified period is stated here. |
| Google Analytics 4 / Consent Mode | Measurement and consent signals on the main website | The effective duration of cookies and events depends on the service configuration, pending a final inventory. |
| Meta — SDK / Pixel / CAPI | Advertising measurement and attribution; includes server-to-server sending | Disabling IDFA/GAID does not by itself block all events. Retention and recipients require verification of the active service. |
| Microsoft Clarity — CAE | Interaction metrics, heatmaps and session replay depending on configuration | The tag is loaded on CAE. Effective consent, masking and retention must be verified. |
| IndexedDB qpilot — QuantumDrive | Local threads, metadata and voice notes for QPilot | Until deleted or cleared locally; no automatic expiry has been established. The text of authenticated threads is synchronised to the account. |
| qd_qpilot_threads_v1 — previous implementation | Local history from earlier versions of QPilot | Limits on the number of threads are not equivalent to time-based expiry. |
The names and durations of third-party cookies must be completed with a traffic inventory by version, platform and choice. This table describes what has been identified; it does not constitute an exhaustive audit of the browser in production.
4. Current controls and withdrawal
The main website's panel offers accept, reject and configure; you can reopen it with the cookie preferences button. Optional categories start unticked. The analytics option updates PostHog and Google's analytics_storage; marketing updates Google's advertising permissions. This panel does not control all the app's SDKs, the other pages or server-side destinations.
Tool initialisation, PostHog's cookieless mode, Consent Mode signals, Meta's automatic events and CAPI require end-to-end blocking and withdrawal to be completed and verified. It is not claimed that no transmission currently takes place before a choice is made. A cookieless mode does not imply the absence of personal data or an automatic exemption from consent either.
You can change ATT on iOS, manage permissions and storage in your browser and exercise your rights at privacy@quantumdriveev.com. Email is an additional channel; it does not replace the obligation for withdrawing consent to be as easy as giving it. Withdrawal does not affect the lawfulness of prior processing, and deleting cookies does not remove data already received by providers.
5. QPilot and requested storage
Storage of threads, preferences and audio used for a requested feature must be distinguished from analytics and advertising. Voice is sent for transcription; the transcript may remain in the synchronised history. Clearing the browser does not necessarily delete the account copy, and deleting a thread does not remove all persistent preferences. See the full policy for providers, memory and the limits of deletion.
6. Recipients, transfers and rights
A European region does not rule out access from other countries. Safeguards must be verified for each entity, service and contract: the DPF or contractual clauses are not automatically attributed to all providers. The review of documentation and retention periods is pending; you can request information about safeguards and exercise access, rectification, erasure, objection, restriction, portability and withdrawal of consent at the contact address given.
See the privacy policy or its original Spanish version, which explain your rights, the response period and how to lodge a complaint with the AEPD (Spanish Data Protection Agency). Changes of purpose require information and, where applicable, a new choice.