Cookies

1. Strictly necessary cookies

Authentication session (Supabase): when you sign in, Supabase sets HttpOnly + Secure + SameSite=Lax cookies to maintain your session. Without this cookie you cannot access your account.

Language (next-intl): we save your ES/EN preference so we do not ask every time. This is a non-personal cookie.

Anti-CSRF: security tokens generated by Next.js to protect forms from cross-site attacks.

2. Performance cookies

Vercel Web Analytics: measures load times (LCP, INP, CLS) and visited routes. Does NOT identify individual users — data is aggregated and anonymized. Without these metrics we could not detect slow pages.

Vercel Speed Insights: similar to Web Analytics, measures real performance from user devices.

You can disable JavaScript in your browser to block these scripts if you prefer.

3. Cookies we do NOT use

We do not have: Facebook Pixel, Google Ads, Google Analytics, Hotjar, Segment, Mixpanel, or any other advertising or behavioral tracker.

We do not sell data nor share it with advertising networks.

4. How to manage cookies

You can block cookies from your browser settings. If you block the "strictly necessary" ones you will lose your session and cannot use account features.

In most jurisdictions (Chile, US), strictly necessary cookies do not require a consent banner. Performance ones are opt-out — follow your browser instructions to disable them.

If you are an EU/UK user and prefer explicit consent before loading Vercel performance cookies, write to our contact email and we will configure manual opt-out.

5. Questions

For questions about cookies or how to disable them, write to the site contact email.