Cookie Policy
Last updated: 2026-10-27
AreaCacao uses strictly necessary cookies to operate the service and, with your consent only, product-analytics cookies (PostHog, EU) to understand usage and improve the tool, plus marketing cookies (Meta) to measure how our campaigns perform. Each category is accepted or declined separately, and we never sell your data.
Cookies we use
| Name | Purpose | Duration | Type |
|---|---|---|---|
better-auth.session_token | Identifies your authenticated session. Without it you cannot sign in. | 7 days | Strictly necessary |
better-auth.session_data | Encrypted cache holding role / 2FA / ban status to avoid a database lookup on every request. | 5 minutes | Strictly necessary |
__Secure-better-auth.csrf_token | CSRF token for mutating requests. | Session | Strictly necessary |
ph_*_posthog | Product analytics (PostHog, EU): which features are used and how, to improve the product. Only set if you give your consent. | Up to 12 months | Analytics (with consent) |
ac_analytics_consent | Remembers your analytics choice (accept/decline) so we don't ask again. | 12 months | Preference |
_fbp | Identifies your browser so visits and sign-ups coming from our ads are attributed to the right campaign. Provider: Meta. | 3 months | Marketing (with consent) |
_fbc | Stores the identifier of the ad you clicked so the conversion is attributed to that ad. Provider: Meta. | 3 months | Marketing (with consent) |
ac_marketing_consent | Remembers your marketing choice (accept/decline), separately from your analytics choice. | 12 months | Preference |
Marketing and campaign measurement
If you accept the marketing category we load the Meta pixel, which records the pages you view inside AreaCacao and whether you complete a sign-up or open the checkout for a subscription. Those same events are also sent from our server to Meta so measurement doesn't depend on the browser: in that server-side send your email travels as an irreversible digest (SHA-256), never in the clear, and only if you accepted this category. If you decline, the pixel is not loaded and nothing is sent from the server either. You can change your mind at any time from "Manage cookie preferences".
Analytics and consent
For product analytics we ask for your prior consent via a notice (opt-in): nothing is tracked until you accept. You can decline without affecting how the app works, and change your choice anytime by clearing the consent cookie in your browser. Strictly necessary cookies (session) do not require consent.
What about localStorage?
Your browser stores some UI preferences (panel state, last search filter, etc.) in localStorage. It contains no identifying data and is never sent to our servers. When you sign out, your personal preferences are cleared.
How to manage cookies in your browser
You can block or delete cookies from your browser settings. Note that if you block session cookies, you will not be able to sign in to AreaCacao.
You can review and change which cookies you allow at any time.
See also: Privacy Policy · Terms of Service.