Cookie Policy

1. What cookies are

Cookies are small files that a website stores in your browser to remember information between visits. Here we explain exactly which ones we use — and make clear that the list is short.

2. The only cookie we use

We use only one strictly necessary cookie to keep you signed in:

• rz_refresh — stores the token that automatically renews your login session, so you don't need to type your password again on every visit. It is HttpOnly (it cannot be read by scripts, including third-party ones) and is only sent to our own servers, never to another site. It expires after up to 30 days of inactivity.

Because it is strictly necessary for the login to work, this cookie does not require prior consent (Article 7, I, and ANPD's guidance on essential cookies) — but we disclose it here for transparency.

3. Statistics cookies (Google Analytics) — only with your consent

On our public pages (home page, diagnosis, sign-up, login, and policy pages) we use Google Analytics 4 to understand where visits come from and which pages are most useful. It is only activated if you click "Accept" on the cookie notice; if you choose "Essential only", no statistics cookie is set and Google receives no identifier from your browser.

• Cookies: _ga and _ga_FXCNW192FR (lasting up to 2 years), used to distinguish visits.
• Data: pages visited, visit source (e.g., Google, Instagram), device type, and events such as starting the diagnosis, sign-up, and confirmed payment. The IP address is anonymized and we do not send your name, email, phone number, or link tokens.
• Where we don't measure: the logged-in area of Robozão Max (everything under /app) does not send anything to Google Analytics.
• Legal basis: consent (LGPD, Article 7, I). You can withdraw it at any time (see section 5).

We do not use social media pixels, advertising tools, or any other third-party tracking cookie.

4. Local browser storage (not quite a "cookie", but similar)

Besides the cookie above, we store some information only in your browser (localStorage/sessionStorage), which never leaves your device to another site:

• Remembered email — if you check "Remember email" on the login screen.
• Referral code — if you arrived through an affiliate link, we store the code to give proper credit on your sign-up.
• Virtual bankroll session — your account token stays stored while the browser tab remains open, so you don't need to sign in again for every action in the Bankroll tab.

This data stays only in your browser — we do not receive it, nor do we share it with third parties.

5. How to manage or delete

You can delete cookies and local storage data at any time through your browser's privacy/cookie settings (usually under "Settings → Privacy and security → Cookies and site data"). This will sign you out of your account on your next visit and will make the cookie notice appear again, at which point you can choose "Essential only" to turn off statistics. You can also block Google Analytics across all websites using the official Google opt-out extension.

6. Contact

Questions about this policy can be sent to [contact/DPO email to be defined] or via WhatsApp at (81) 99565-2137. See also ourPrivacy Policy.