Cookie Policy
Last updated: May 2026
This Cookie Policy explains how Candidatoo ("we", "us") uses cookies and similar technologies when you visit candidatoo.com.br or use our service. It complies with the EU/UK ePrivacy framework, the California Consumer Privacy Act (CCPA/CPRA), Canada's PIPEDA, and Brazil's General Data Protection Law (LGPD - Lei nº 13.709/2018).
1. What are cookies?
Cookies are small text files stored on your device when you visit a website. We also use comparable technologies such as local storage, session storage, pixels, and SDKs. In this policy "cookies" covers all of them.
2. Categories of cookies we use
2.1 Strictly necessary
Required to deliver the service you requested: authentication, session security, load balancing, fraud prevention, and remembering your language. These cannot be disabled.
2.2 Functional
Remember preferences (theme, recent searches, editor state). Disabling them degrades the experience but does not break the product.
2.3 Analytics
Aggregated, pseudonymous usage statistics that help us understand which features are useful. We use privacy-respecting analytics with IP truncation.
2.4 Marketing
Only set if you explicitly opt in. Used to measure the effectiveness of campaigns. We do not sell personal information and do not engage in "cross-context behavioral advertising" as defined by CPRA.
3. Your choices
- Consent banner: On your first visit you can accept all, reject all, or customize by category. You can change this anytime via the "Cookie preferences" link in the footer.
- Browser settings: Most browsers let you block or delete cookies. Doing so may break parts of the service.
- Do Not Track / Global Privacy Control: We honor GPC signals as a valid opt-out of "sale" and "sharing" under CPRA.
4. Third parties
We use the following processors that may set cookies on our behalf: Supabase (authentication), Cloudflare (security/CDN), Stripe (payments), and our analytics provider. Each acts as a data processor bound by a written agreement.
5. International transfers
Some processors are located in the United States, Canada, or the European Union. We rely on Standard Contractual Clauses, adequacy decisions, and ANPD-approved safeguards for transfers from Brazil.
6. Retention
Session cookies expire when you close the browser. Persistent cookies expire within 13 months at the latest, in line with EDPB and ANPD guidance.
7. Contact
Questions about this policy? Email our DPO at info@candidatoo.com.br.