1. What cookies are
Cookies are small text files your browser stores on your device when you visit a site. They let us recognise you across pages, keep sessions, remember preferences and understand how the service is used.
2. Types of cookies we use
Strictly necessary. Essential for the service to work (session, authentication, cart). Do not require consent.
Functional. Remember preferences such as language or theme. Used after a simple notice.
Analytics / performance. Help us understand how the service is used, in aggregate. Set only with your consent.
Marketing. Only with your consent, we use the Meta Pixel (Meta Platforms Ireland Ltd.) to measure which Facebook and Instagram ads led to visits and purchases. If you buy with this consent given, our server also sends Meta the purchase confirmation (amount, box, and your email, phone, name and address hashed with SHA-256, plus IP address and browser) so it can be matched to the ad. Without consent, none of this is sent.
3. List of cookies
| Cookie | Finalité | Durée | Type |
|---|---|---|---|
| authjs.session-token / __Host-authjs.session-token | Identifies an authenticated user session (NextAuth). | 30 days | Strictly necessary |
| mb_session | Guest session identifier: lets you open boxes and keep an inventory without an account. | 30 days | Strictly necessary |
| mb_cart | Stores the guest cart contents. | 30 days | Strictly necessary |
| NEXT_LOCALE | Remembers your chosen language (PT/EN). | 1 year | Functional |
| mb_cookie_consent_v1 | Records your consent preferences (essential / analytics / marketing). | 12 months | Strictly necessary |
| __Host-csrf | CSRF protection token. | Session | Strictly necessary |
| _fbp / _fbc | Meta Pixel (Facebook/Instagram): measures which ads led to visits and purchases. Set only if you accept marketing cookies. | 90 days | Marketing |
4. Your preferences
You can review or change your consent (analytics, marketing) at any time. Strictly necessary cookies are always on.
5. How to manage cookies in the browser
You can also change your preferences, reject non-essential cookies or delete existing ones via your browser settings:
Blocking strictly necessary cookies may break parts of the service (sign in, cart, opening boxes).
6. Changes
This policy may be updated when we add or change cookies. The “last updated” date appears at the top of this document.