Cookie Policy
Version: 2026-07-22.v1 · Last updated: 22 de julho de 2026 · Not yet in effect. Document in draft.
Which cookies we use, what for, and how to manage your consent.
1. What cookies are
Cookies are small text files stored in your browser that allow the platform to recognize your session, remember preferences and, only with your consent, measure product usage. Similar technologies (such as localStorage for non-sensitive preferences) are treated by this Policy in the same way. Authentication tokens are never stored in localStorage and live only in httpOnly and Secure cookies.
2. Categories
- Essential (always active): required for basic operation: session authentication, security (CSRF, rate limiting) and recording your consent choice. They cannot be disabled, because without them the platform does not work.
- Analytics (opt-in): measure aggregate page usage to improve the product. They are only activated after your explicit consent in the cookie banner.
- Marketing (opt-in): intended for advertising and remarketing. We do not use marketing cookies in the current phase; should we start using them, this Policy will be updated and consent will be requested beforehand.
3. Consent management
- On first access, the cookie banner offers Accept all and Reject all with the same visual prominence, in addition to per-category configuration. Nothing beyond the essential is activated before your choice (real opt-in).
- You can review and change your preferences at any time in Settings → Cookies or through the link in the footer.
- Refusing analytics/marketing cookies does not limit use of the platform.
- Your choice is recorded with the date and version of this Policy; we will ask for new consent if the categories change materially.
4. Cookie table
| Cookie | Category | Purpose | Duration |
|---|---|---|---|
duoworks_session | Essential | Authenticated session from our own authentication (httpOnly, Secure, SameSite); never accessible by JavaScript | Session / until logout or expiration |
cookie_consent | Essential | Stores your per-category consent choice | 12 months |
csrf_token [SE APLICÁVEL: confirmar na revisão técnica] | Essential | CSRF protection on mutations | Session |
| [COOKIES ANALÍTICOS: a definir] | Analytics | Aggregate usage metrics [ferramenta ainda não contratada, placeholder; será listada aqui antes da ativação] | — |
| [COOKIES DE MARKETING] | Marketing | Not used in the current phase | — |
The list above is kept up to date with each change of provider or purpose. Should there be any divergence between this table and the cookies actually stored, the strictest essential category prevails until this Policy is updated.
5. More information
The processing of personal data associated with cookies follows our Privacy Policy. Questions may be sent to the Data Protection Officer (DPO) channel indicated there.
Version: 2026-07-22.v1 · 22 de julho de 2026