# Cookie Notice

Cookie and similar-technologies policy for the ESGRAF website.

Source: https://esgraf.com/en/legal/cookie-notice

**Last updated:** August 31, 2026

This Cookie Notice forms part of the [Privacy Policy](https://esgraf.com/en/legal/privacy-policy) of **Especialidades de Grafito, S.A. de C.V.** (“**ESGRAF**”) and explains the use of cookies and similar technologies on [https://esgraf.com](https://esgraf.com) (the “**Site**”).

When cookies make a person identified or identifiable, their processing is governed by Mexico’s **Federal Law on the Protection of Personal Data Held by Private Parties** (LFPDPPP) and other applicable rules.

## 1. What are cookies?

Cookies are small files stored on the User’s device (computer, tablet, or phone) when visiting a website. They can remember preferences, keep the Site working, help understand how it is used, and improve browsing experience.

Similar technologies include local storage, session storage, pixels, tags, and other identifiers that serve analogous functions.

## 2. Who uses cookies?

Cookies may be:

- **First-party:** set by ESGRAF or the Site domain.
- **Third-party:** set by providers that support the Site (for example, infrastructure, security, content delivery, or analytics), subject to their own policies when they act independently.

## 3. Types of cookies that may be used

### 3.1 Strictly necessary or technical cookies

Essential for Site operation. Without them, certain features would be unavailable. Examples:

| Cookie / technology | Purpose | Typical duration |
| --- | --- | --- |
| `esgraf_i18n` | Remember the User’s preferred language (Spanish/English) | Browser configuration / persistent session |
| Quote-cart local storage | Keep quotation line items on the User’s device while preparing a request | Until the User clears them or browser storage |
| Infrastructure / security cookies (e.g. hosting or CDN provider) | Security, load balancing, protection against abusive traffic | Varies by provider |

These cookies are considered necessary to provide the service requested by the User when browsing or using the Site.

### 3.2 Preference and consent cookies

Allow the Site to remember User choices (such as language or regional settings) and the decision on non-essential cookies:

| Cookie / technology | Purpose | Typical duration |
| --- | --- | --- |
| `esgraf_cookie_consent` | Remember whether the User accepted or rejected analytics and advertising cookies | Approximately 6 months |

### 3.3 Google Tag Manager, analytics (GA4), and advertising (Google Ads)

ESGRAF uses **Google Tag Manager** (“**GTM**”) to load and manage measurement and advertising tags on the Site from a single platform. Through GTM, the following may be enabled, among others:

- **Google Analytics 4** (“**GA4**”), to measure Site usage (pages visited, interactions, traffic sources, performance) and improve content and functionality.
- **Google Ads** (formerly Google AdWords), to measure campaign performance, attribute conversions, and, where applicable, show personalized ads on Google properties or partner sites.

These tools are provided by **Google LLC** and/or its affiliates (for example, Google Ireland Limited). They may set first- or third-party cookies and collect online identifiers, truncated IP addresses, or other technical data. Further processing is governed by Google’s policies:

- [Google Privacy Policy](https://policies.google.com/privacy)
- [How Google uses cookies](https://policies.google.com/technologies/cookies)
- [Google Analytics Terms of Service](https://marketingplatform.google.com/about/analytics/terms/us/)
- [Google Ads Privacy Policy](https://policies.google.com/technologies/ads)

Cookies or identifiers that **may** be set when the User accepts analytics and advertising cookies include, for example:

| Cookie / technology | Provider | Purpose | Typical duration |
| --- | --- | --- | --- |
| `_ga`, `_ga_*` | Google (GA4) | Distinguish users and sessions; aggregated usage statistics | Up to 2 years (configuration-dependent) |
| `_gid` | Google (GA4) | Distinguish users over a short period | 24 hours |
| `_gcl_au` | Google (Ads) | Conversion measurement and ad performance | 90 days |
| Advertising / remarketing cookies (e.g. `IDE`, `test_cookie`) | Google (Ads / DoubleClick) | Show relevant ads and limit frequency | Varies by Google |

The Site also sends **interaction events** to GTM (for example, contact form submission, clicks on email, phone, WhatsApp, or map location links) for statistical and campaign measurement purposes. These events generally do not include free-text content entered by the User in forms.

GTM is loaded from `googletagmanager.com`. Analytics and advertising cookies **are not activated** until the User grants consent, as described in Section 4.

### 3.4 Analytics or performance cookies (summary)

The GA4-related cookies described in Section 3.3 help understand—in aggregated or pseudonymized form—how the Site is used. When such tools process personal data, the [Privacy Policy](https://esgraf.com/en/legal/privacy-policy) applies.

### 3.5 Advertising or marketing cookies (summary)

The Google Ads-related cookies described in Section 3.3 measure campaigns, record conversions, and, when the User consents, support interest-based advertising. ESGRAF does not sell personal data obtained through cookies to third parties for their independent advertising purposes.

## 4. Legal basis and consent

- Use of **technical or strictly necessary** cookies is based on providing the Site service requested by the User.
- Use of **analytics (GA4)** and **advertising (Google Ads)** cookies loaded through GTM is based on the data subject’s **consent**, unless another basis applies under applicable law.
- On a first visit, a notice (“banner”) lets the User **accept** or **reject** analytics and advertising cookies. The choice is stored in the `esgraf_cookie_consent` cookie for approximately six months.
- ESGRAF implements **Google Consent Mode**: GA4 and Google Ads tags remain restricted (`analytics_storage`, `ad_storage`, `ad_user_data`, and `ad_personalization` set to “denied”) until the User accepts; if rejected, they stay disabled.
- Users may **change their choice at any time** via the “Cookie settings” link in the Site footer, in addition to managing cookies in the browser (Section 5).

## 5. How to manage or disable cookies

**On the Site:** use the **“Cookie settings”** link in the footer to show the consent notice again and accept or reject analytics and advertising cookies.

**In the browser:** Users may configure their browser to block or delete cookies. Instructions are usually under “Privacy” or “Security” settings. For reference:

- [Google Chrome](https://support.google.com/chrome/answer/95647)
- [Mozilla Firefox](https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox)
- [Safari](https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac)
- [Microsoft Edge](https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09)

If necessary cookies are blocked, some Site features (for example, language preference or the quotation cart) may stop working correctly. If analytics and advertising cookies are rejected, GTM still loads in restricted mode, but GA4 and Google Ads will not record data for measurement or remarketing purposes.

To limit personal data use associated with cookies for secondary purposes, Users may also:

- Withdraw consent via “Cookie settings” in the footer.
- Use Google opt-out tools: [Google Analytics Opt-out Browser Add-on](https://tools.google.com/dlpage/gaoptout) and [Google Ads Settings](https://adssettings.google.com/).
- Contact [info@esgraf.com](mailto:info@esgraf.com).

## 6. Transfers and processors

Some technology providers that enable cookies or storage (for example, hosting, CDN, email, security, **Google Tag Manager**, **Google Analytics 4**, and **Google Ads**) may process technical information on servers outside Mexico, including in the United States and Ireland. Those providers act, as applicable, as processors or third parties under the [Privacy Policy](https://esgraf.com/en/legal/privacy-policy) and under their own privacy policies when they act independently.

## 7. Updates

ESGRAF may amend this Cookie Notice when technologies, providers, or applicable rules change. The current version will be available on this page with its update date.

## 8. Further information

To exercise ARCO rights or obtain more information about personal data processing:

- **Email:** [info@esgraf.com](mailto:info@esgraf.com)
- **Privacy Policy:** [/en/legal/privacy-policy](https://esgraf.com/en/legal/privacy-policy)
- **Legal Notice:** [/en/legal/legal-notice](https://esgraf.com/en/legal/legal-notice)