La Bruja · Legal
Cookie policy
Last updated: September 12, 2026 · Version 0.1-draft
Draft pending legal review
This text is a draft prepared by the editorial team and has not yet been reviewed or approved by a lawyer. It may change without notice.
Draft pending legal review.
1. What cookies are
Cookies are small files your browser stores when you visit a website. We also use similar technologies (browser local storage and pixels). They remember your session and preferences and, if you agree, measure site usage and show advertising.
2. How we manage your consent
On your first visit you will see a banner. Necessary cookies are always set because the site does not work without them. Analytics and advertising cookies are only activated if you click "Accept". We apply Google Consent Mode v2: until you accept, Google Analytics and AdSense run without cookies and without personal identifiers.
You can change your mind at any time:
- by clearing the
cookie_consentpreference through the "Cookies" link in the footer (the banner reappears); - in your browser settings (block or delete cookies);
- for Google advertising at adssettings.google.com; for Clarity at clarity.microsoft.com/privacy.
3. Cookies we use
| Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
next-auth.session-token / __Secure-next-auth.session-token | La Bruja | Necessary | Keep you signed in | 30 days |
next-auth.csrf-token, next-auth.callback-url | La Bruja | Necessary | Sign-in security (anti-CSRF) | Session |
cookie_consent (local storage) | La Bruja | Necessary | Remember whether you accepted or rejected optional cookies | 12 months |
NEXT_LOCALE / language preference | La Bruja | Necessary | Remember your chosen language | 12 months |
_ga, _ga_* | Google Analytics | Analytics | Measure visits, pages and events in aggregate | 2 years |
_gid | Google Analytics | Analytics | Distinguish users within 24 h | 24 hours |
_clck, _clsk, CLID, ANONCHK, MR, SM | Microsoft Clarity | Analytics | Anonymised session recordings and heatmaps | session to 12 months |
__gads, __gpi, IDE, test_cookie, DSID | Google AdSense / DoubleClick | Advertising | Serve ads, cap their frequency and measure performance; personalised only with consent | session to 13 months |
__stripe_mid, __stripe_sid | Stripe | Necessary (payment) | Fraud prevention during checkout | 12 months / 30 min |
_ml*, _csrf | Mercado Pago | Necessary (payment) | Security during checkout | Session |
Third-party cookies are subject to their providers' policies: Google, Microsoft, Stripe, Mercado Pago.
4. Advertising
We show Google AdSense ads to keep most of the Service free. Without your consent, ads are non-personalised (they do not use your browsing history). Links to Amazon products in the "Resources" section are affiliate links marked as sponsored.
5. More information
See the Privacy policy to learn how we process the data these cookies collect, or write to oraculo@labrujaa.com.