This is a courtesy translation. In case of divergence, the Portuguese (pt-BR) version prevails.
Policy
Cookie Policy
Last updated: September 19, 2026version 1.1
01What cookies are
Cookies are small text files a site stores in your browser to remember information between visits, such as a preferred language or an authenticated session. Some are essential for the service to work; others only improve the experience.
02On this website (indene.io)
This website, today, writes no cookies of its own during ordinary browsing. Usage metrics come from two deliberately cookie-free tools: OpenPanel (self-hosted analytics, whose anonymous identifier is generated on the server and kept only in the page's memory, writing nothing to your browser) and Cloudflare Web Analytics (aggregate performance measurement). There is no advertising tracking and no third-party profiling cookie.
The only cookies that may appear on this domain are the ones below, under the conditions described:
| Cookie | Purpose | Duration | Category |
|---|---|---|---|
| indene_lang | Language preference read by the site's root router to direct you to the pt, en or es version. Today the site does not write this cookie: it is only read if it already exists in the browser. If we start writing it, this page is updated first; browsing works fully without it. | 1 year, if written | functional |
| __cf_bm / cf_clearance | Cloudflare security cookies, written only during automated-traffic mitigation or a security challenge, to distinguish legitimate visitors from bots. | Minutes to hours, as mitigation requires | required |
03In the application (the product)
When you authenticate in the Indene product, the cookies below come into existence. The list reflects what the product writes as of this version, and any new cookie is added here before it goes live. The product uses no analytics tool.
| Cookie | Purpose | Duration | Category |
|---|---|---|---|
| authjs.session-token / __Secure-authjs.session-token | Keeps the session authenticated after the access code sent by e-mail. Without it, the product does not know who is logged in. | Session / as configured expiration | required |
| authjs.csrf-token | Protection against cross-site request forgery (CSRF) on the authentication forms. | Session | required |
| NEXT_LOCALE | Stores the language chosen inside the product (pt-BR, en or es) so it is not asked again on every visit. | 1 year | functional |
04Cookie categories
- Required: without them the function does not exist (authentication, form-fraud protection, attack mitigation). They require no consent, supported by the legitimate interest in security.
- Functional: improve the experience (remembering language), but everything works without them, just asking again on each visit.
- Analytics: we use no analytics cookie. The tools adopted measure without cookies; if that ever changes, this page will be updated and consent will be requested before anything is written.
- Marketing/advertising: we do not use them. The product is B2B, sold directly, with no targeted advertising.
05Third-party connections
For transparency, these are the network connections browsing this site may generate beyond our domain:
- analytics.indene.io: the OpenPanel endpoint, operated on the site operator's own infrastructure (not a commercial third-party service).
- openpanel.dev: only the OpenPanel script download. Like any server, it receives the IP address and user agent of that download; no browsing event is sent to this domain.
- static.cloudflareinsights.com: the Cloudflare Web Analytics beacon, cookie-free.
The typefaces (Newsreader, IBM Plex Sans, IBM Plex Mono) are served from our own domain: unlike the market default, no connection is made to Google Fonts while you browse.
06How to manage or disable cookies
Required cookies cannot be disabled without breaking the function they protect (in the product, login). The others can be blocked in your browser settings, usually under Settings → Privacy and security → Cookies. Blocking the language cookie only means the preference is not remembered between visits.
07Legal basis
The use of required cookies rests on the legitimate interest in the security and operation of the service (art. 7, IX, LGPD). Any non-essential cookie adopted in the future (cookie-based analytics, for instance) will be preceded by explicit consent, under art. 7, I, of the LGPD and art. 7, VIII, of the Brazilian Internet Civil Framework (Law 12,965/2014).
08Changes to this policy
Any new cookie, on this site or in the product, required or not, updates the tables on this page before reaching production. This is a living policy, not a static document.
09Legislation observed and target certifications
Legislation observed (in force)
- LGPD (Lei 13.709/2018)
- Marco Civil da Internet (Lei 12.965/2014)
- CMN Resolução 4.893/2021
- BCB Resolução 85/2021
Planned certifications
- ISO/IEC 27001
- SOC 2 Type II
- ISO 22301