This Policy explains how the viralizi.ai website and web app use cookies, pixels and similar technologies, what each one is for and how you choose which ones to allow. It complements the Privacy Policy, which explains everything else about your personal data.
In short. Necessary cookies are always on, because the website and the app do not work without them. Ad and visit measurement tools, including the pixels of Meta, Google, TikTok, Kwai, Pinterest and LinkedIn, only load if you accept them in the cookie banner. Without that acceptance, our servers do not send anything about you to those platforms either. You can change your choice at any time under Cookie preferences, at the bottom of every page. This summary does not replace the full text.
01What these technologies are
- Cookies are small text files that a website saves in your browser, for example to keep you signed in or to remember a choice.
- Browser storage (local storage and session storage) works like a cookie, but stays only in your browser.
- Pixels and tags are snippets of code from an analytics or advertising platform. They tell the platform that a page was visited or that an action happened, such as filling in a form.
- Server events (Conversions API) are the same events, sent by our servers directly to the platform instead of by your browser. They follow the same consent rule as the pixels (section 5).
Cookies set by viralizi.ai are first-party cookies. Cookies set by other companies, such as Google or Meta, are third-party cookies and follow those companies' policies too.
02Categories and your choice
| Category | What it is for | When it is on |
|---|---|---|
| Necessary | signing in, security, protection against bots on forms, remembering your language and your cookie choice, and recording which affiliate link brought you | always, because the website and the app do not work properly without them |
| Ad and visit measurement | counting visits, measuring the results of our ads, attributing sales to campaigns and showing our ads to people who visited the website | only if you accept |
On your first visit, a banner asks whether we may use measurement cookies, with the buttons Accept, Decline and Choose. Declining has the same size and style as accepting, and the website works normally either way. Choose opens the preferences, where you can save your choice or accept all.
Your choice is saved in the vz_consent cookie on the viralizi.ai domain, so the website and the app at app.viralizi.ai follow the same choice.
03Tools we use
Depending on our campaigns, we may use some or all of the tools below. All of them follow the same consent rule.
| Tool | Company | Category | What it does | Main cookies and storage |
|---|---|---|---|---|
| Your cookie choice | viralizi.ai | Necessary | remembers whether you accepted or declined measurement | vz_consent |
| Sign-in and preferences | viralizi.ai | Necessary | keeps you signed in to the app and remembers your language and the clinic you were viewing | better-auth.session_token, and vz-lang and vz-tenant in browser storage |
| Security and bot protection | Cloudflare (including Turnstile) | Necessary | protects the website and forms against attacks and bots | __cf_bm, cf_clearance |
| Affiliate attribution | viralizi.ai | Necessary | remembers which affiliate link brought you, so the affiliate can be paid if you buy; it stays on our domain and is never sent to third parties | vz_at, in a cookie and in browser storage |
| Visit details | viralizi.ai | Necessary | keeps the campaign tags and ad click identifiers from the address you arrived with, only during the visit | session storage |
| Google Analytics 4 | Ad and visit measurement | counts visits, pages and actions on the website | _ga, _ga_ followed by an ID, _gid | |
| Google Ads | Ad and visit measurement | measures conversions from our Google ads and builds audiences | _gcl_ cookies and Google's own cookies | |
| Meta Pixel | Meta (Facebook and Instagram) | Ad and visit measurement | measures conversions from our ads on Facebook and Instagram and builds audiences | _fbp, _fbc |
| TikTok Pixel | TikTok | Ad and visit measurement | measures conversions from our TikTok ads and builds audiences | _ttp |
| Kwai Pixel | Kwai | Ad and visit measurement | measures conversions from our Kwai ads | _kwai_ cookies |
| Pinterest Tag | Ad and visit measurement | measures conversions from our Pinterest ads and builds audiences | _pin_unauth, _epik | |
| LinkedIn Insight Tag | Ad and visit measurement | measures conversions from our LinkedIn ads and builds audiences | li_fat_id, lidc and LinkedIn's own cookies |
How long third-party cookies last is set by each company and may change. You can find the details in their policies: Google, Meta, TikTok, Kwai, Pinterest and LinkedIn.
04What we tell the platforms
When you accept measurement, we tell the platforms about these actions: visiting a page, viewing an offer or a video, filling in the contact form or the Profile X-ray, tapping WhatsApp, phone or email, scheduling a call, applying to the affiliate program, starting checkout, entering payment details, buying, starting a subscription or a free trial, creating an account, and some milestones of the service, such as the twin being approved and the first video being ready.
With each event, the platform may receive: the event name, date and time, the page address, campaign tags (UTM), ad click identifiers (such as fbclid, gclid, ttclid, epik, the Kwai click ID and li_fat_id), the identifiers of the cookies above, your IP address and browser details (user agent), and, if you gave them to us, your email, phone, name, city, state, postal code and country. Email, phone, name and address data are converted into a hash (SHA-256) on our servers before they are sent. The platforms use this hash only to match the event with their own users.
05Server events (Conversions API)
Some events are sent both by the pixel in your browser and by our servers, through the Meta Conversions API, the Google Analytics Measurement Protocol, the TikTok Events API, the Pinterest Conversions API, the LinkedIn Conversions API and Kwai's event API. Both copies carry the same event ID, so the platform counts the event only once.
- Server events only happen if you accepted measurement. Without that, the events do not leave your browser, the form is sent to us marked as without consent, our servers send nothing to the platforms, and we keep only a record that the event was skipped, without personal data.
- Campaign tags and ad click identifiers stay in your browser during the visit and only reach our servers, together with the form, if you accepted measurement.
- Events that happen after you become a customer, such as a purchase or the first video being ready, use the choice you made on the website. To stop these events, decline measurement under Cookie preferences and also write to [E-MAIL DE PRIVACIDADE], since your later choice in the browser does not reach our servers on its own.
06Affiliate links
If you arrive through an affiliate's link, we save the vz_at code in your browser for 30 days, so we can pay the affiliate's commission if you buy (section 4 of the Affiliate Program Terms). This code is necessary to run the affiliate program, stays on our domain and is not shared with third parties. If you accepted measurement, the events above are also sent to the affiliate's own pixel on the same platforms. The affiliate sees the results in their ad accounts, under the platforms' rules, but never receives from us your name, email, phone or any other contact data.
07How to change your choice
- On our website and in the app: open Cookie preferences, at the bottom of every page, and change your choice at any time. If you decline after having accepted, we delete the cookies of the measurement tools listed in section 3 and reload the page. Withdrawing consent stops new collection, but does not undo what was collected before.
- In your browser: you can block or delete cookies in the browser settings. Blocking necessary cookies may sign you out or stop the app from working.
- At the platforms: you can also limit ads in each company's settings, for example at Google My Ad Center, and use the Google Analytics opt-out add-on. In the United States and Europe, the industry opt-out pages YourAdChoices and Your Online Choices are also available.
08How long we keep them
| Item | Period |
|---|---|
| Your cookie choice (vz_consent) | 180 days, after which we ask again; we also ask again if the tools change |
| Affiliate attribution (vz_at) | 30 days from the click |
| Campaign tags and click identifiers in session storage | until the end of the visit |
| Record of events sent to the platforms | deleted after [PRAZO DE RETENÇÃO DO LOG DE EVENTOS] |
| Third-party cookies | as set by each company (section 3) |
09Legal basis
Necessary cookies are based on our legitimate interest in providing a secure website, recording affiliate referrals and paying for them, and on the performance of the contract with our customers (LGPD art. 7, V and IX). Measurement cookies, pixels and server events are based on your consent (LGPD art. 7, I), which you may withdraw at any time. In the European Economic Area and the United Kingdom, the same rules require your prior consent. In the United States, using advertising pixels may count as "sharing" personal information for cross-context behavioral advertising; we only do it with your consent, and you can turn it off at any time as described in section 7.
10Changes and contact
We may update this Policy when we add or remove tools. The date of the last update is shown at the top, and when the tools change we ask for your choice again. This Policy is also published in Portuguese at /br/cookies. If the two versions conflict, the Portuguese version prevails, unless mandatory law where you live requires otherwise.
[RAZÃO SOCIAL] · CNPJ [CNPJ] · [ENDEREÇO]. Data Protection Officer: [ENCARREGADO (DPO)] · [E-MAIL DE PRIVACIDADE].