Tell me about your case

Cookie Policy

Last updated: 10 November 2026

1. What this page is about

When you visit this website, some things are stored in your browser and others are measured without storing anything. They are not the same, and this page tells the two apart so that you know exactly what happens and what you can decide.

A cookie is a small file that a site stores on your device and that travels back to its server with every request. Local storage is similar, but it stays in your browser and is not sent on its own: it only leaves if the site itself sends it.

2. How we ask for your permission

When you arrive you will see a notice. What you accept or reject there is whether the analytics and advertising cookies are switched on: the ones that make it possible to recognise your browser between visits and the ones our advertising providers use to measure their campaigns.

What does not depend on that notice is what is strictly necessary for the website to work, and the aggregate measurement we do without identifying you. Both are explained just below.

You can change your decision whenever you like, using the button in section 7.

3. What is strictly necessary

This is stored because without it the website cannot do what you ask of it. It is local storage, apart from the language preference (a cookie), and it is never shared with anyone:

  • cc_cookie_consent — remembers whether you accepted or rejected, so that we do not ask you again. It lasts one year.
  • carmem_waitlist_session and carmem_waitlist_started_at — your session identifier in the form and when you started, so that you do not lose what you have already written. They last one year.
  • carmem_cierre_pendiente — if you finish the form and the notification does not reach our server (for example, if the connection drops), we keep that last submission to try again. It is deleted as soon as it is confirmed.
  • idioma — if you choose a language in the website's selector, it remembers your choice so that it always takes you to that version. It is only stored if you choose it yourself. It lasts one year.
  • cc_trailer_seen — remembers that you have already seen the introduction to a page. It lasts as long as the session.

Cloudflare, which hosts the site, may add a strictly necessary cookie to tell legitimate visitors from bots.

4. What we measure without cookies and without asking your permission

To find out which parts of the website are read and which are abandoned, we measure the path of each visit without storing any identifier on your device and without being able to recognise you tomorrow. There is no cookie, no mark, and it is not cross-referenced with any other website.

What is measured this way:

  • Which pages are viewed and how far down each one is scrolled.
  • How long is spent on each section and which buttons are pressed.
  • Which part of the video is played, if it is played.
  • The type of device and the browser.
  • Where the visit came from: a campaign, a search engine or an external link.

This measurement is done by PostHog, the tool we use to understand how the website is used, served from brujula.carmemcarvalho.com —a subdomain of ours— and with the data hosted in Frankfurt (Germany). If you do not accept the notice, PostHog works without storing anything on your device: the visit is measured and recorded (see below, “About session recordings”), but no mark is left that would allow you to be recognised on another visit. If you accept, it stores a cookie and can then link your visits to one another.

The legal basis for the measurement and session recording without identifying you is our legitimate interest in understanding and improving our own website (Article 6(1)(f) GDPR). It is not shared with third parties for commercial purposes, and you can object by writing to us at hola@carmemcarvalho.com.

5. Where you came from

If you come from an advert or a campaign, we store in your browser the source parameters (utm_source and similar ones, click identifiers, the page you landed on and the link you came from) in carmem_attribution_v2.

That information does not leave your device unless you submit the form. If you submit it, it is attached to your record so that we know which channel works. If you do not submit it, it stays in your browser and we do not receive it. It is kept for 90 days.

6. What is only switched on if you accept

If you accept the notice, these services are switched on, each with its own cookies:

  • PostHog (PostHog Inc., data in Frankfurt) — if you accept, it stores the cookie ph_*_posthog for one year, which is what allows it to recognise your browser between visits. Without your permission it still measures and records the session, but without storing anything on your device (section 4).
  • Google Analytics 4 (Google Ireland Ltd.) — audience measurement: visits, source and pages viewed. Cookies _ga and _ga_*, two years.
  • Google Ads (Google Ireland Ltd.) — measuring which adverts produce enquiries. Cookie _gcl_au, 90 days.
  • Meta Pixel (Meta Platforms Ireland Ltd.) — measuring Facebook and Instagram campaigns and showing more relevant adverts. Cookies _fbp and _fbc, 90 days.
  • TikTok Pixel (TikTok Information Technologies UK Ltd.) — the same for TikTok campaigns. Cookie _ttp, 13 months.

About session recordings. All visits are recorded, whether or not you accept this notice: movements, clicks and scrolling on the page are logged. The content of form fields is always masked: your name, your telephone number and your answers do not appear in the recording, not even for us, and neither does what you tick about your health. Recordings are kept for 30 days and are then deleted automatically.

About advanced matching. Google, Meta and TikTok may receive an irreversibly encrypted version of your phone number and your email in order to attribute an enquiry to its campaign. They cannot reverse that encryption or see your data. This matching does not depend on this notice: we do it from our server with the consent you give when you submit the form (see the Privacy Policy). What you decide here is whether those platforms' tags run in your browser; and if you reject, your encrypted contact details are used only for attribution, not to target adverts at you.

Where the data is. PostHog stores its data in Frankfurt. Google, Meta and TikTok process data in the European Economic Area through their Irish subsidiaries and, where there are transfers outside it, rely on the standard contractual clauses approved by the European Commission. Traffic from brujula.carmemcarvalho.com goes through the Cloudflare network before reaching Frankfurt and may be routed through different locations; the storage is European.

7. Changing your decision or deleting everything

You can review or change your decision about cookies at any time from here:

And you can delete cookies and local storage from your browser:

  • Chrome / Edge: Settings → Privacy and security → Cookies and site data.
  • Firefox: Settings → Privacy & Security → Cookies and Site Data.
  • Safari: Settings → Privacy → Manage Website Data.

If you delete the storage before finishing the form, your saved progress is lost.

8. Other external services

  • Cloudflare Stream serves the video. The player does not load until you get close to the video: if you never get there, your browser does not contact Cloudflare Stream at any point.

9. Changes and contact

If we change the technologies we use, we update this page and its last-updated date. If you have any questions, write to hola@carmemcarvalho.com. You can also read our Privacy Policy and our Legal Notice.