Cookie Policy

Cookies are small text files stored in your browser when you visit a website. We also use related technologies (localStorage, sessionStorage) that work in a similar way. Together they let the site remember who you are, keep you signed in, and protect your session.

Strictly necessary. These cookies are required for the site to function. They cannot be disabled without breaking core features like login. We rely on them under LGPD legitimate-interest / contract-performance bases, so they do not require consent.

• sp_session — your authenticated session token (HTTP-only, Secure, SameSite=Lax). Lifetime: until logout or 30 days idle.
• sp_csrf — anti-CSRF token bound to your session. Lifetime: session only.
• sp_prefs — UI preferences such as theme and locale. Lifetime: 1 year.

Functional. These remember choices you make to improve your experience (e.g., dismissed banners). They are also strictly necessary in practice; you can clear them from your browser at any time.

Analytics. We use first-party, aggregated analytics to count visits and measure broad usage patterns. We do not use cross-site tracking cookies, do not share analytics with advertising networks, and do not build profiles for ads.

Third-party. A small number of cookies are set by services we embed for the platform to work safely:

• PayPal — cookies set on the checkout flow by PayPal (our payment processor) to authenticate the buyer's PayPal session, perform fraud-risk scoring, and operate 3-D Secure. Required to accept payment.
• Bot/abuse protection — cookies set by our CAPTCHA / bot-protection provider on sign-up and high-risk actions. Required to defend the platform.

• sell your data;
• use third-party advertising cookies;
• share cookie data with social networks;
• build advertising profiles about you;
• use cross-site tracking for marketing.

Every modern browser lets you view, delete, and block cookies — usually under Settings → Privacy. Blocking strictly necessary cookies will prevent login and checkout from working. You can also clear localStorage from the same Privacy settings.

Mobile platforms (iOS/Android) expose similar controls under Settings → Safari/Chrome → Privacy. Browser-level "Do Not Track" signals are honored where they apply to our non-essential cookies.

We may update this Policy when we add or remove cookies. Material changes will be posted on this page with a new "Last updated" date.

Questions about cookies? contact@starplace.net.