1. What cookies are
Cookies are small text files your browser stores on your device when you visit a site. They let us recognise you across pages, keep sessions, remember preferences and understand how the service is used.
2. Types of cookies we use
Strictly necessary. Essential for the service to work (session, authentication, cart). Do not require consent.
Functional. Remember preferences such as language or theme. Used after a simple notice.
Analytics / performance. Help us understand how the service is used, in aggregate. Set only with your consent.
Marketing. We do not currently use third-party cookies for targeted advertising.
3. List of cookies
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| authjs.session-token / __Host-authjs.session-token | Identifies an authenticated user session (NextAuth). | 30 days | Strictly necessary |
| mb_session | Guest session identifier: lets you open boxes and keep an inventory without an account. | 30 days | Strictly necessary |
| mb_cart | Stores the guest cart contents. | 30 days | Strictly necessary |
| NEXT_LOCALE | Remembers your chosen language (PT/EN). | 1 year | Functional |
| mb_cookie_consent_v1 | Records your consent preferences (essential / analytics / marketing). | 12 months | Strictly necessary |
| __Host-csrf | CSRF protection token. | Session | Strictly necessary |
4. Your preferences
You can review or change your consent (analytics, marketing) at any time. Strictly necessary cookies are always on.
5. How to manage cookies in the browser
You can also change your preferences, reject non-essential cookies or delete existing ones via your browser settings:
Blocking strictly necessary cookies may break parts of the service (sign in, cart, opening boxes).
6. Changes
This policy may be updated when we add or change cookies. The “last updated” date appears at the top of this document.