Cookie policy
Version 1.1 — effective October 22, 2026
This policy explains which cookies and local storage Subfaro uses on the website (subfaro.com) and the web app (app.subfaro.com). It complements the Privacy policy.
In short: today we use only strictly necessary cookies and storage — to keep you signed in and remember your preferences. We don't use analytics or advertising cookies, or third-party trackers. Pro payments happen on Stripe's website, which uses its own cookies (see section 3).
1. What cookies and local storage are
Cookies are small files a website saves in your browser. Local storage is a similar browser feature that keeps information in the browser itself and isn't sent to the server automatically.
2. What we use
| Name | Where | Type | What it's for | Duration |
|---|---|---|---|---|
subfaro_token | app.subfaro.com | Essential cookie (httpOnly, session) | Keeps you securely signed in to your account. Page scripts can't read it. | 60 days |
subfaro_locale | app.subfaro.com | Essential cookie | Remembers the web app's language. | 1 year |
subfaro-lang | subfaro.com | Local storage | Remembers the language you picked on the website (Portuguese or English). | Until you clear your browser data |
subfaro-consent | subfaro.com | Local storage | Remembers that you've seen the cookie notice and your choices. | Until you clear your browser data |
subfaro-currency | subfaro.com | Local storage | Keeps the currency (R$ or US$) you picked for prices, if you switch it manually. | Until you clear your browser data |
Because they're strictly necessary for the service to work, these items don't require consent. They're not used to track you across other websites.
3. Payments (Stripe Checkout)
When you subscribe to Pro, payment happens on Stripe Checkout, at checkout.stripe.com, and the subscription is managed in Stripe's portal. On those pages Stripe itself uses cookies needed to process payments securely and prevent fraud, under Stripe's cookie and privacy policies. Subfaro doesn't control or read those cookies.
4. Optional cookies in the future
If we ever start using optional cookies (for example, audience measurement), they'll be off by default and only turned on with your consent, which you can withdraw at any time. We'll update this policy before that happens.
5. How to manage them
You can view, block and delete cookies and site data in your browser settings (Chrome, Safari, Firefox, Edge and others, usually under "Privacy" or "Cookies and site data"). If you block the subfaro_token cookie, you won't be able to sign in to the web app. Clearing site data makes the cookie notice and language choice appear again.
6. Contact
GZ SEGURANÇA E DEFESA CIBERNÉTICA LTDA — CNPJ 40.988.106/0001-60 — Cascavel, Paraná, Brazil. Questions about cookies: privacidade@subfaro.com.
This English version is provided for convenience. For users in Brazil, the Portuguese version prevails.