Cookie policy

1. Why this site shows no cookie banner

oculos.io uses only essential cookies and preference cookies. None of them is used for advertising, for third-party audience measurement or for tracking you across other sites.

The LGPD, the Brazilian general data protection law, does not require consent for that kind of cookie, because it is needed to deliver what you asked for or to remember a choice you made. That is why there is no banner.

If a cookie that needs consent is ever added, we ask for your consent before it is stored, and this page is updated on the same date.

2. Which cookies are ours

There are three, described below by the job each one does.

• Login session cookie. Essential. Keeps you signed in after you log in. It is signed, marked HttpOnly, which stops a script from reading it, and sent only over HTTPS. It lasts up to 30 days.
• Login form protection cookie. Essential. Stops another site from submitting the form in your place. It lasts the session.
• Language cookie. Preference. Stores the language you chose in the selector or through the address, so the site does not ask again. It lasts 1 year.

3. Which cookies are not ours

Some cookies come from services the site has to use. We read none of them.

• Cloudflare, which sits in front of the site and protects it against abuse. It writes short-lived cookies of its own, such as __cf_bm, to tell a person from a robot.
• Stripe, at the moment of paying by card. The payment page is hosted by Stripe and uses Stripe cookies, so that the charge works and to prevent fraud.
• Google and Microsoft, if you choose to sign in with their account. The login happens on their site, with their cookies.

4. How we measure visits without cookies

To know which pages are read, the site records the path, the language, the country reported by Cloudflare, the device class and the host the click came from.

Alongside it goes a value calculated from your IP address and your browser, mixed with a secret that changes at midnight every day. The IP address is not kept.

That value cannot be reversed, and it does not link today's visit to tomorrow's, because the next day's secret is a different one.

There is no measurement cookie, no persistent identifier, no third-party audience tracker and no social network pixel.

5. The captcha does not use cookies either

The forms on the site have a sliding puzzle to tell a person from a robot. The image is generated on our own server.

We do not use reCAPTCHA or anything like it. Those services set third-party cookies, and on top of that they do not load inside China.

6. How you manage cookies

Every browser lets you see, delete and block cookies, in the privacy settings. Searching for cookies inside the settings usually leads straight to the right screen.

You can also browse in a private window, which clears everything when you close it.

If you block this site's cookies, the catalog, the reviews and the news still work. What stops working is signing in to the account, and the site will forget your language choice each time you open a new page.

7. Changes to this page

If a cookie is added or removed, this page is updated on the same date, and the version number in the footer goes up.

Questions about anything here: [email protected].