Cookie Policy
1. Summary
This website (cyberarmor.com.br) does not use advertising or tracking cookies. When you open a page, nothing that is not necessary loads before you choose. With your permission, the website measures visits in aggregate with Vercel Web Analytics, which sets no cookies, and remembers your theme. With the same permission, the website keeps in your browser which campaign or ad brought you here; this only reaches us if you send the contact form. You choose in the cookie bar, where Accept all and Necessary only have equal prominence and Customize lets you choose by category, and you can change your mind at any time under "Cookie preferences" in the footer.
The platform app is a separate environment with its own list, in section 4.
2. What cookies and local storage are
Cookies are small text files that your browser stores at the request of a website. Local storage (localStorage and sessionStorage) does a similar job inside the browser. This policy treats both the same way. We sort each item into four categories: necessary (the service does not work or is not secure without it; no consent needed), functional (remembers a choice you made), analytics (measures usage) and marketing (advertising). Functional and analytics depend on your consent. Marketing exists nowhere.
3. On the website (cyberarmor.com.br)
| Name | Type | Purpose | Duration | Source | Category |
|---|---|---|---|---|---|
| ca-consentimento | localStorage | Records your cookie choice, with the date and the version of this policy. Without it, the cookie bar would come back on every page. | Until you clear browser data or the policy version changes | First party | Necessary |
| ca-tema | localStorage | Remembers light or dark theme. Written only if you accept the functional category and use the theme button. | Until you clear browser data or reject the category | First party | Functional |
| ca-sugestao-de-idioma-dispensada | sessionStorage | Remembers that you dismissed the language suggestion. Written only with the functional category accepted. | Until you close the tab | First party | Functional |
| Vercel Web Analytics | Script, no cookie and no local storage | Counts visits and most viewed pages in aggregate, so we know which content is useful. It does not identify you and does not combine data with other websites. Operated by Vercel Inc. (USA) and served from our own domain. Loaded only with the analytics category accepted. | Aggregated data stays in the Vercel dashboard | Third party (processor) | Analytics |
| ca-origem | localStorage | Keeps where your visit came from: the campaign parameters in the address (utm_source, utm_medium, utm_campaign, utm_content, utm_term) and the ad click identifier from Google (gclid) or LinkedIn (li_fat_id), with the landing page and the date. It stays in your browser and is only sent with the contact form, if you send it. Written only with the analytics category accepted; rejecting the category deletes it. | 90 days, or until you reject analytics or clear your browser data | First party | Analytics |
Legal basis: the necessary item relies on our legitimate interest in keeping the website working and recording your choice (LGPD, art. 7, IX). The functional items and analytics depend on your consent (art. 7, I), which you can withdraw at any time, as easily as you gave it.
Language is set by the page address (/en, /es), not by a cookie. The website fonts are served from our own domain: your browser does not talk to Google Fonts or any other external delivery network.
Restricted area of the website
The cookies below are only written when a member of our team signs in to the restricted area of the website (login and dashboard). They are not set for visitors.
| Name | Type | Purpose | Duration | Origin | Category |
|---|---|---|---|---|---|
| ca_session | Cookie (HttpOnly, Secure, SameSite=Strict) | Keeps the session of whoever signed in to the dashboard. | 30 days | First party | Necessary |
| li_oauth_state | Cookie (HttpOnly, Secure, SameSite=Lax) | Anti-fraud protection when our team connects the company LinkedIn account. | 5 minutes | First party | Necessary |
4. In the platform app
| Name | Type | Purpose | Duration | Origin | Category |
|---|---|---|---|---|---|
| token, refresh_token | localStorage | Keep your session signed in. | Until you sign out or the session expires | First party | Necessary |
| mfa_pending, mfa_enrollment_required | localStorage | Control the two-factor verification step during sign-in. | Until sign-in is completed | First party | Necessary |
| ca_locale | Cookie (SameSite=Lax) | Remembers the language you picked in the language switcher. | 1 year | First party | Functional |
| theme | localStorage | Remembers light or dark theme. | Until you clear browser data | First party | Functional |
| onboarding_answers, cyberarmor.patch.visoes | localStorage | Keep your first-run assistant answers and saved screen views in your browser. | Until you clear browser data | First party | Functional |
Besides the items above, the app uses temporary technical keys in the browser (for example, to recover the page after a system update and for a project-creation draft). They live in sessionStorage and disappear when you close the tab.
The app uses no analytics or advertising cookies and loads no third-party resources: every item above is first-party. If that ever changes, we will say so here and load it only after your authorization.
5. How to control them
- On the website: use the cookie bar (Accept all, Necessary only or Customize) or, at any time, the "Cookie preferences" link in the footer. Rejecting a category deletes what it had stored. If you withdraw analytics, the page reloads without the script.
- In your browser: you can view, block and delete cookies and site data in the privacy settings (Chrome, Firefox, Safari and Edge all offer this). Clearing the app data ends your session.
- Links to other sites (for example LinkedIn) lead to third-party environments, which have their own cookies and policies.
6. Questions and rights
Data protection officer (DPO): Encarregado de dados da Hegeon, dpo@cyberarmor.com.br. See also the Privacy Policy, which explains your rights as a data subject (art. 18 of the Brazilian LGPD).
7. Changes
If we change the cookies we use, we update this table and the effective date above. When the version of this policy changes, the website asks for your choice again.