Cookie Policy
This page lists every cookie and similar technology Redcard sets, why we set it, how long it lasts and which legal basis applies in your country. The categories are the same everywhere; the legal basis changes per jurisdiction.
For the full legally binding version, read docs/COOKIES.md
1. What we set
Redcard sets only what it needs to run. There are no advertising cookies, no cross-site tracking and no third-party ad pixels.
- Essential: session and sign-in cookies, the consent choice you made, and the device token that lets the app send you match alerts. Without them the app cannot work.
- Analytics: aggregated, anonymised page views so we know which features people actually use. Never used for advertising.
- Preferences: your language, your theme (light, dark or high contrast) and whether you are signed in.
- Marketing: none today. If we ever add a campaign we will ask for consent first and this page will say so.
2. Categories and how long they last
Essential cookies last for the life of the session (or until you sign out). Analytics and preference cookies last up to 12 months. You can see the exact list with the names and expiration dates in the app, under Settings, Privacy.
3. Legal basis, by country
The categories are global; the lawful basis is not. This is the part that changes depending on where you live:
- European Union and United Kingdom (GDPR / PECR): consent for analytics and marketing. Essential cookies rely on legitimate interest (the service cannot run without them).
- Brazil (LGPD): consent for analytics and marketing, as in the EU. You can withdraw it at any time.
- Mexico, Argentina, Spain and the rest of Latin America: consent for marketing; analytics relies on legitimate interest, and you can opt out from the cookie banner.
- California (CCPA/CPRA): we do not sell personal information and we do not share it for cross-context behavioural advertising.
4. How to change your choices
On the web, the banner appears again if you clear your browsing data. In the app, go to Settings, Privacy and change the category toggles. Withdrawing consent takes effect from the next request: we delete the data we collected under it as soon as technically possible.
5. Contact
Questions about cookies, or a request to delete the data tied to one, write to privacy@redcard.pro . The Data Protection Officer is dpo@redcard.pro.