This policy explains, in a clear and transparent manner, which cookies and tracking technologies we use, why we use them, and how you can control them.
Cookies are small text files that a website stores in your browser (or device) when you visit it. They are used to remember preferences, keep sessions active, and collect usage data.
In addition to cookies, we may use similar technologies such as tracking pixels, web beacons, and local storage (localStorage/sessionStorage).
We use cookies for three main purposes:
Analytics and advertising cookies are treated as a single choice in the consent banner: accepting enables both, rejecting disables both. Essential cookies are always active because the site cannot work without them.
The table below lists the main cookies that may be set when using the Xplore Dados platform:
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
sb_access_token |
Supabase | Authenticated user session token | Session / 1 hour |
sb_refresh_token |
Supabase | Automatic session renewal | 7 days |
cookie_consent |
Xplore Dados | Stores your choice in the consent banner (true/false) | 1 year |
csrf_token |
Flask | Protects forms against Cross-Site Request Forgery attacks | Session |
session |
Flask | Server session identifier (httpOnly) | Session |
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga |
Google Analytics 4 | Distinguishes unique visitors by assigning a random identifier | 2 years |
_ga_* |
Google Analytics 4 | Maintains session state in GA4 | 2 years |
_gid |
Google Analytics 4 | Distinguishes unique visitors (24-hour scope) | 24 hours |
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_fbp |
Meta (Facebook) | Browser identifier for Meta Pixel: measures ad conversions | 3 months |
_fbc |
Meta (Facebook) | Stores the click-through parameter (fbclid) from Meta ads | 3 months |
_gcl_au |
Google Ads | Tracks conversions from Google Ads | 3 months |
Some preferences are stored in your browser's local storage rather than in cookies. Most of these preference keys never leave your device; the one exception is flagged in the table below:
| Key | Purpose |
|---|---|
xplore-theme |
Your light, dark or system theme choice |
smartchat-bubble-color |
Message bubble color chosen in SmartChat |
academy_billing_period |
Monthly or annual toggle on the plans page |
xplore_pending_biblio |
Bibliometric analyses in progress, so notifications survive a page reload. Unlike the other keys in this table, this one does reach our server: every 15 seconds, the browser sends the pending job identifier to our history endpoint to check whether the analysis has finished. |
These keys live in your browser's session storage and are erased when you close the tab. Unlike the preference keys above, the information they hold does reach a server, as described in each row:
| Key | Purpose |
|---|---|
xplore_utm_params |
Keeps the campaign parameters (utm_source, utm_medium, utm_campaign, utm_content, utm_term) of the link that brought you here, and appends them to the checkout and Xplore Academy links you click, so the purchase is attributed to the right campaign. They therefore reach our server in the URL. |
xplore_tracked_events |
Records which usage events were already sent in this session, so the same event is not counted twice. The events themselves are pushed to Google Tag Manager, which only forwards them to Google Analytics 4 once you have accepted analytics cookies. |
xplore_tool_timers |
Start time of a tool run, used to measure how long it took. The resulting duration is sent as part of the usage event described above. |
The cookies listed above may be set by third-party services integrated into the platform. Each provider has its own privacy policy:
We have implemented Google Consent Mode v2 integrated with Google Tag Manager (GTM). This means that:
You have full control over cookies. There are three ways to manage them:
Essential cookies are set automatically as they are necessary for the site to function (legal basis: legitimate interest / performance of contract).
Analytics and advertising cookies are only activated after your explicit consent (legal basis: consent). You can:
We may update this Cookie Policy periodically to reflect changes in the cookies used or in legislation. The current version will always be available on this page.
If you have questions about cookies or privacy, please contact us: