Note: The Portuguese version is the legally binding version.

Cookie Policy

Version 1.0 — Last updated: April 5, 2026

1. What Are Cookies

Cookies are small text files stored in your browser when you visit a website. They allow the website to recognize your device and store information about your preferences or previous actions.

ChatSense uses only strictly necessary cookies for the operation of the platform. We do not use tracking cookies, advertising cookies, third-party analytics, or any behavioral profiling technology.

2. Cookies We Use

We exclusively use the following cookies:

2.1. Authentication Cookies

  • access_token — JWT access token for the platform. HttpOnly, SameSite=Lax, Secure. Expiration: 10 minutes. Automatically renewed via refresh token.
  • refresh_token — Session renewal token. HttpOnly, SameSite=Lax, Secure. Expiration: 7 days. Used to issue new access tokens without requiring re-login.

These cookies are essential for maintaining your authenticated session. Without them, you would need to log in for every action on the platform. They are HttpOnly cookies (inaccessible by JavaScript) and Secure (transmitted only over HTTPS).

2.2. Preference Cookies

  • cs-theme — Stores your theme preference (light/dark). Stored in localStorage (not an HTTP cookie). Persistent until you change it.

2.3. Chat Widget Cookies

  • Visitor session — When a visitor uses the chat widget embedded on a website, a session token is stored to maintain conversation continuity. Expiration: duration of the browsing session.

3. Cookies We Do NOT Use

ChatSense does not use any of the following categories of cookies:

  • Analytics cookies — We do not use Google Analytics, Mixpanel, Amplitude, or similar services
  • Advertising cookies — We do not display ads and do not use tracking pixels (Facebook Pixel, Google Ads, etc.)
  • Third-party tracking cookies — We do not share browsing data with advertising networks
  • Behavioral profiling cookies — We do not create behavioral profiles of users
  • Device fingerprinting — We do not collect device fingerprints

4. Legal Basis

The cookies we use are strictly necessary for the provision of the contracted service, thereby not requiring specific consent under:

  • LGPD Art. 7, V — Processing necessary for the performance of a contract
  • GDPR Art. 6(1)(b) — Processing necessary for the performance of a contract
  • ePrivacy Directive Art. 5(3) — Exemption for strictly necessary cookies

5. How to Manage Cookies

You may manage or delete cookies through your browser settings. However, by blocking ChatSense authentication cookies, you will be unable to use the platform.

Instructions by browser:

  • Chrome: Settings → Privacy and Security → Cookies
  • Firefox: Settings → Privacy & Security → Cookies and Site Data
  • Safari: Preferences → Privacy → Manage Website Data
  • Edge: Settings → Cookies and Site Permissions

6. Related Technologies

In addition to cookies, we use the following technologies for platform operation:

  • localStorage — Stores user preferences (theme, language, sidebar state). Data remains on the device and is not transmitted to the server.
  • WebSocket / Server-Sent Events (SSE) — Real-time connections for message delivery. These do not store data on the device.
  • Service Worker — Caches static assets for performance. Does not track user behavior.

7. Changes

If we begin using additional cookies in the future, we will update this policy with 15 days' advance notice and notify users. If non-strictly-necessary cookies are introduced, we will request prior consent in accordance with applicable law.

8. Contact

For questions about this cookie policy: