La Bruja · Legal

Cookie policy

Last updated: September 12, 2026 · Version 0.1-draft

Draft pending legal review

This text is a draft prepared by the editorial team and has not yet been reviewed or approved by a lawyer. It may change without notice.

Draft pending legal review.

1. What cookies are

Cookies are small files your browser stores when you visit a website. We also use similar technologies (browser local storage and pixels). They remember your session and preferences and, if you agree, measure site usage and show advertising.

2. How we manage your consent

On your first visit you will see a banner. Necessary cookies are always set because the site does not work without them. Analytics and advertising cookies are only activated if you click "Accept". We apply Google Consent Mode v2: until you accept, Google Analytics and AdSense run without cookies and without personal identifiers.

You can change your mind at any time:

  • by clearing the cookie_consent preference through the "Cookies" link in the footer (the banner reappears);
  • in your browser settings (block or delete cookies);
  • for Google advertising at adssettings.google.com; for Clarity at clarity.microsoft.com/privacy.

3. Cookies we use

NameProviderTypePurposeDuration
next-auth.session-token / __Secure-next-auth.session-tokenLa BrujaNecessaryKeep you signed in30 days
next-auth.csrf-token, next-auth.callback-urlLa BrujaNecessarySign-in security (anti-CSRF)Session
cookie_consent (local storage)La BrujaNecessaryRemember whether you accepted or rejected optional cookies12 months
NEXT_LOCALE / language preferenceLa BrujaNecessaryRemember your chosen language12 months
_ga, _ga_*Google AnalyticsAnalyticsMeasure visits, pages and events in aggregate2 years
_gidGoogle AnalyticsAnalyticsDistinguish users within 24 h24 hours
_clck, _clsk, CLID, ANONCHK, MR, SMMicrosoft ClarityAnalyticsAnonymised session recordings and heatmapssession to 12 months
__gads, __gpi, IDE, test_cookie, DSIDGoogle AdSense / DoubleClickAdvertisingServe ads, cap their frequency and measure performance; personalised only with consentsession to 13 months
__stripe_mid, __stripe_sidStripeNecessary (payment)Fraud prevention during checkout12 months / 30 min
_ml*, _csrfMercado PagoNecessary (payment)Security during checkoutSession

Third-party cookies are subject to their providers' policies: Google, Microsoft, Stripe, Mercado Pago.

4. Advertising

We show Google AdSense ads to keep most of the Service free. Without your consent, ads are non-personalised (they do not use your browsing history). Links to Amazon products in the "Resources" section are affiliate links marked as sponsored.

5. More information

See the Privacy policy to learn how we process the data these cookies collect, or write to oraculo@labrujaa.com.