Draft pending legal and security review
This page is published in internal production for transparency. The legal text has not yet been reviewed by Mira Advocacia and our security team. Final wording may change. The list of cookies and the technical revocation steps are accurate today.
Cookie Policy
Last updated: May 11, 2026
What are cookies
Cookies are small files stored in your browser when you visit a site. They keep you signed in, remember preferences, and in some cases measure how the product is used. OMUNA processes health data, which is sensitive personal data under LGPD Art. 5 II, so we are intentionally conservative about what we set and what we let third parties set.
Categories we use
We group cookies in three categories: Essential, Analytics, and Marketing. Essential cookies cannot be turned off because the platform cannot function without them. Analytics and Marketing are optional and require your explicit consent before any related script is loaded.
Cookies actually in use
The list below reflects the current product phase. When a deferred integration such as Stripe or MoonPay goes live, this section is updated and the consent version is bumped so existing users are re-prompted.
| Source | Cookies | Category | Retention | Consent gated |
|---|---|---|---|---|
| Privy | privy-token, privy-id-token, privy-app-cache | Essential | Session and persistent (verify exact expiry in DevTools) | No |
| Vercel Analytics | _vercel_* | Analytics | Session and short-lived persistent | Yes |
| Socket.io (chat only) | Polling fallback session cookie (rare; WebSocket preferred) | Essential | Session | No |
Retention periods
Each cookie has its own retention period. Session cookies are deleted when the browser is closed. Persistent cookies expire on the date set by their source. Exact durations per cookie are in the table above and are verified at runtime via DevTools.
How to revoke consent at any time
- Open the public site and click "Cookie settings" in the footer. The consent banner reopens with your current choices pre-filled.
- If you are signed in, open Settings → Data and Privacy and click "Cookie settings" in the Cookie Preferences card.
- If your browser sends a Global Privacy Control signal (such as Brave or DuckDuckGo by default), we honor it automatically. Optional categories are kept off without requiring any interaction.
- You can also clear our localStorage key farmaleaf-cookie-consent from your browser settings. The banner will then reappear on your next visit.
Data Protection Officer
Contact information for our DPO will be added here after legal review.
Pending legal review by Mira Advocacia
Legal basis
Each cookie is processed under a specific legal basis under LGPD and GDPR. The mapping for each cookie will be added here after legal review.
Pending legal review by Mira Advocacia