Privacy Policy
This page explains, in plain language, what we collect when you visit Cabeceira, which cookies we use, and how you can opt out of analytics at any time.
What we collect
When you visit a page, we may record:
For anonymous browsing, we never assign or store a persistent identifier that follows you across visits.
- The URL of the page you visited
- Your locale (e.g. en, es, de, fr)
- Your market (the storefront region we route affiliate links to)
- Your country, inferred from a request header sent by our CDN (Cloudflare) — never from a script running in your browser
Cookies we use
Below is every cookie Cabeceira sets, what it's for, how long it lasts, and how we classify it.
| Name | Purpose | Duration | Classification |
|---|---|---|---|
cab-locale-pref | Remembers that you explicitly chose to stay on this language, so we stop suggesting another one. | 180 days | Functional |
cab-market-session | Remembers the storefront (market) resolved for you when you followed a campaign link, for the rest of this browsing session. | Session (deleted when you close your browser) | Functional |
cab-consent | Records whether you accepted or declined analytics cookies. | 180 days | Consent |
cab-campaign | Remembers which marketing campaign brought you here (e.g. a social media post), so we can measure how well it performs. Holds only an opaque campaign id — never any personal data. In the EU/EEA/UK, only set once you accept analytics cookies. | Session (deleted when you close your browser) | Analytics — campaign measurement |
cab-campaign-entry | A short-lived, one-time id that lets us count a single campaign click as a single visit, even if you load several pages afterwards. It is removed automatically as soon as the first page finishes loading. Same rule as cab-campaign: in the EU/EEA/UK, only set once you accept analytics cookies. | Session (deleted when you close your browser, and normally already removed after your first page view) | Analytics — entry attribution |
cab-country | Your country, inferred by Cloudflare from your connection. Used only to suggest the right language/market — never for analytics. | Session (deleted when you close your browser) | Necessary |
cb_sid | HttpOnly session cookie used to deduplicate anonymous analytics counts (visits, traffic source) across pageviews. Holds only an opaque, server-generated value — no persistent personal identification. Also set on this international site. | 30 minutes of inactivity (sliding — renewed on each pageview) | Necessary |
cab-admin-session | Signs the Cabeceira team into the internal admin panel. Never set for regular visitors. | 7 days | Necessary (Brazil domain only) |
Data retention
Aggregated pageview counts are kept indefinitely for traffic reporting; cookies expire on their own after the durations listed above. We do not sell your data.
Legacy newsletter database
Separate from anonymous browsing, the legacy database stores email, locale, source, status, timestamps, and random confirmation/unsubscribe tokens for opt-out and integrity. Capture, confirmation, reconfirmation, and new sends are temporarily disabled; existing unsubscribe remains active and independent. Resend is the provider configured for the legacy mechanism, not proof that a specific send occurred. The audience is not sold, rented, or exported.
Providers we use
We rely on a small number of infrastructure and advertising partners to run Cabeceira:
- Cloudflare — Content delivery network and bot protection; supplies the country header we use for locale/market suggestions.
- Railway — Hosts our application and database.
- Meta — Powers our social ads and audience measurement, only when you've consented to analytics.
- Amazon — Operates the storefront our affiliate links point to; once you click through, Amazon's own privacy policy applies.
Change your mind
You can withdraw analytics consent at any time. This immediately sets your cookie preference to declined.
As an Amazon Associate I earn from qualifying purchases.