Cookie Policy

1. What they are

Cookies, local storage and similar technologies keep small pieces of information in your browser. We use three kinds: essential cookies, which the platform needs; cookieless, aggregated measurement; and advertising and measurement cookies, which are stored only after you consent.

2. Essential cookies

We use essential cookies and local storage for session and authentication (to keep you signed in), language, interface preferences (such as screen state) and account security. They stay in your browser, they are always on, and the platform does not work without them, so they do not ask for consent.

3. Cookieless measurement

We use Vercel Web Analytics and Vercel Speed Insights, from Vercel Inc., to count visitors, page views and bounce rate, and to measure how fast pages load. The measurement is cookieless and aggregated. It can include events, pages, routes, hostnames, the referrer, UTM parameters, country, device, browser and operating system, plus a few product events (for example, opening an image study) that carry only content identifiers and numbers. As configured, they do not store cookies on your device and do not receive your name, e-mail address or user ID. Page addresses are cleaned of access tokens and of query parameters other than utm_ before they are sent. As with any network request, the provider receives technical connection data, such as an IP address and browser type. We do not use this measurement for advertising.

How long Vercel keeps this aggregated data follows Vercel's own policy and the plan we have with Vercel, which we do not control.

4. Advertising cookies (Google Ads and Meta) and landing-page measurement

Purpose. With your consent, we use the Google Ads tag (gtag.js) and the Meta Pixel on this site to (a) measure which ads on Google, Facebook and Instagram bring visits, sign-ups and subscriptions, and (b) show Practilium ads to people who have visited the site (remarketing). We do not use this data for any other purpose. We do not sell personal data. The landing page go.practilium.com.br, which is separate from this app, uses Google Tag Manager (container GTM-542T27QT) and Google Analytics 4 to measure visits to that page. On that property Google signals is off and user-provided data collection is off: we do not link those events across devices, and we do not combine that measurement with an email address, name or phone number. Granular location and device data collection is on: Google Analytics 4 receives approximate location and device and browser data. We will update this page, and the Subprocessors page, before a new platform starts.

When they load. On this site (practilium.com.br and practilium.com), the Google Ads tag and the Meta Pixel load only after you click "Accept". Before that, and if you click "Decline", none of them loads and none of these cookies is stored. A browser that sends the Global Privacy Control signal is treated as a decline. The Google tag uses Google Consent Mode v2: the signals ad_storage, analytics_storage, ad_user_data and ad_personalization start denied. Google Tag Manager and Google Analytics 4 do not load in this app; they load on the landing page go.practilium.com.br.

Who receives what. The advertising recipients on this site are Google (Google LLC, US; Google Ireland Ltd. for users in the EEA and UK) and Meta (Meta Platforms, Inc., US; Meta Platforms Ireland Ltd. for users in the EEA and UK). We send: the address of the page you visit (without query parameters) and the referring page; events such as page view, completed sign-up and subscription, with value and currency; an internal, pseudonymous account identifier so a sign-up is not counted twice; the cookies listed below; and technical data your browser sends anyway, such as IP address and browser and device type. At sign-up, Google Ads also receives your email address in hashed form to measure the conversion. We do not send your name, email address or phone number to Meta. Google Analytics 4 on go.practilium.com.br receives that page's address, approximate location, and device and browser data. It does not receive your name, email address or phone number, and it does not use that data to link devices.

Cookies and durations. On this site, Google Ads: _gcl_au (about 90 days) and _gcl_aw (about 90 days, when you arrive from a Google ad). Meta: _fbp (browser identifier, about 90 days) and _fbc (click identifier, about 90 days, when you arrive from a Meta ad). On go.practilium.com.br, Google Analytics 4 may store _ga (up to 2 years) and _ga_* (up to 2 years). We keep the campaign source (utm_*, gclid, fbclid) in your browser for 90 days and your consent choice until you change it. Google and Meta keep the data they receive under their own policies: Google Privacy Policy and Meta Privacy Policy.

Legal basis and roles. The legal basis is your consent (UK GDPR Art. 6(1)(a) and PECR, together with the cookie rules of the ePrivacy Directive; for users in the EEA, GDPR Art. 6(1)(a); for users in Brazil, LGPD Art. 7, I). Google and Meta also process this data for their own purposes, as controllers. For the collection and transmission through the Meta Pixel on our site, we are joint controllers with Meta Platforms Ireland Ltd. for users in the EEA and UK, under Meta's Controller Addendum.

International transfers. This data is processed in the United States and other countries. For data from the EEA and UK, we rely on the EU-US Data Privacy Framework (and its UK Extension), under which Google LLC and Meta Platforms, Inc. are certified, and on the European Commission's Standard Contractual Clauses (with the UK Addendum). For data from Brazil, transfers follow LGPD Art. 33, under the vendors' contractual clauses.

Decline or change your mind. Declining is as easy as accepting: click "Decline" in the notice, use "Customize" to turn on only one purpose, or at any time use Your privacy choices in the footer. When you decline on this site, the Google Ads and Meta tags stop immediately, and we delete the _fbp, _fbc, _gcl_au and _gcl_aw cookies and the stored campaign source. Declining does not change how Practilium works for you. That choice applies to this site; go.practilium.com.br is a separate site. California residents: this can be "sharing for cross-context behavioural advertising" under the CCPA/CPRA, and we honour Global Privacy Control as an opt-out of it.

5. Your choices

Cookie settings, the footer link Your privacy choices, and the Global Privacy Control signal are how you refuse or withdraw consent for the advertising and measurement cookies in item 4. You can also delete cookies and local storage in your browser. Doing that signs you out and resets your interface preferences.

More about the information we handle is in the Privacy Policy and on the Subprocessors page. For questions or requests about these cookies or this measurement, contact the data protection officer (DPO), Jeremy Dixon: privacy@practilium.com.