Myndchat Cookie Policy
This policy explains which cookies and similar technologies exist on the Myndchat website, what each one stores, for how long, and how you decide what may be used. It is the document the cookie notice refers to when it appears on your first visit.
We wrote this document from a measurement, not from an assumption. We opened the site in a clean browser, looked at what it stores, looked at who it talks to, and wrote down what we found. Where a category is empty, we say it is empty instead of leaving it out.
This document covers:
- what gets stored in your browser when you open the site, and what does not;
- the four categories we use, what each one does, and which of them depend on your permission;
- the inventory of what exists today, with name, purpose, content and duration;
- how to choose, how to change your mind later, and how to block everything through your browser;
- what we keep about your own choice, and why.
The core guarantee, in one sentence. Nothing that is not strictly necessary loads before you decide. Closing the notice, clicking outside it, scrolling the page or simply carrying on browsing is not consent: without an affirmative action from you, no optional category is enabled and the notice comes back.
The Privacy Policy is a separate document and explains everything we do with personal data, on and off the website. Where the two overlap, this policy is the more specific one about your browser and prevails on that point.
Contents
- 1. Where this policy applies
- 2. What cookies and similar technologies are
- 3. What does not happen before you decide
- 4. The four categories
- 5. The inventory: what exists today
- 6. Third-party services and data leaving Brazil
- 7. How to choose and how to change your mind
- 8. The record of your choice
- 9. How to block cookies through your browser
- 10. Your rights
- 11. Changes to this policy, and how to reach us
1. Where this policy applies
This policy applies to the Myndchat website — the public pages you browse without being logged in, including this one — and to the platform, once it is live and you sign in to your account.
It does not apply to third-party sites and apps you reach from here. When you click a link that leaves our domain, whoever owns that destination decides what gets stored in your browser, under their own policy.
It also does not apply to what happens inside WhatsApp, Instagram, Messenger or TikTok. Those are third-party platforms with their own policies, and they do not depend on any choice made here.
2. What cookies and similar technologies are
A cookie is a small file that a website asks your browser to keep and hand back on later visits. It lets a site remember something between one page and the next — on its own, a website remembers nothing.
We treat the technologies that do the same job by another route in the same way, under the same rules:
| Technology | What it is |
|---|---|
| Cookie | A small file kept by the browser and returned to the site on every request. |
| Local and session storage | Space in the browser itself where a site keeps information without automatically sending it back. Session storage disappears when you close the tab. |
| Pixel, beacon or tag | An image or snippet of code the site loads from a third party which, simply by being loaded, tells that third party you visited the page. |
| Device identifier | Any unique value stored in the browser that makes it possible to recognise the same person across different visits. |
Wherever this document says "cookie", read "cookie and any of those technologies". The technical distinction changes neither what you decide nor what the law requires of us.
A cookie is first-party when it is set by the site you are visiting, and third-party when it is set by another company whose content that page loaded. The difference matters: third-party cookies are what make it possible to follow the same person across different sites.
3. What does not happen before you decide
This is the most important section of the document, because it is the one you can check yourself. Open your browser's developer panel, clear this site's cookies and reload the page: what you find is what is described here.
That was exactly the method of our own measurement, carried out on 18 and 19 August 2026 with a clean browser and without touching the notice:
| What was checked | Measured result |
|---|---|
| Cookies stored | One only: the language cookie, essential and first-party |
| Local and session storage | Empty |
| Third-party servers contacted | None |
| Pixels, beacons and tags | None |
| Audience measurement scripts | None |
| Advertising scripts | None |
The block does not rely on our code alone. The site declares a content security policy to your browser that only authorises loading files from our own domain. While a category has not been accepted, that authorisation does not mention the address of that category's provider — and the browser refuses the load on its own, even if a mistake on our side tried to make it. That is the difference between "our program decides not to load it" and "the browser will not let it load".
We do not use a cookie wall: refusing blocks no content. Every page on this site stays open to someone who rejects everything, with exactly the same content as for someone who accepts everything.
We also do not treat silence as acceptance. Until you click one of the options, the default choices in section 4 apply — and those are "off" for everything that is not essential.
4. The four categories
We organise everything into four categories, described by the purpose they serve. They are the same four in the notice, in the Privacy Settings panel and here — if they differed from one screen to the next, you would have no way of knowing what you clicked.
| Category | What it is for | Initial state | Legal basis |
|---|---|---|---|
| Essential | Making the site work: serving the page in the language you are reading, protecting forms against misuse, and storing your own privacy choice | Always on, and cannot be switched off | Legitimate interest, as strictly necessary (art. 7, IX, of the LGPD) |
| Preference | Remembering interface choices that are not necessary for the site to work, such as display settings | Off | Consent (art. 7, I) |
| Advertising | Showing Myndchat ads matched to your interests and measuring campaign results on ad platforms | Off | Consent (art. 7, I) |
| Analytics | Measuring audience and site usage — how many people arrive, where from, and what they look at — to improve content and navigation | Off | Consent (art. 7, I) |
Essential is not a label we use to get out of asking permission. A cookie only enters that category if, without it, something you asked for stops working. The two that exist today pass that test: without the language cookie the site cannot serve the page in the right language, and without the consent cookie there is no way to remember the choice you just made — the notice would return on every page.
The three optional categories are empty today. No Preference, Advertising or Analytics service is in use on this site. Accepting all, right now, enables nothing — and we say so rather than letting you assume otherwise.
We keep the empty categories visible on purpose. If they were hidden until a service existed, a single pixel arriving tomorrow would change the structure of the notice, and your earlier choice would have been made against a different map. As it stands, a new service is born inside a category you have already seen and already answered — and it is born switched off.
5. The inventory: what exists today
These are the cookies actually set by this site, measured in the browser. There are no others, and there is no third-party cookie at all.
| Technical name | Category | Who sets it | What it stores | Duration |
|---|---|---|---|---|
| woow_locale | Essential | Myndchat (first-party) | Two letters: pt or en. Nothing else. It carries no identifier, is not unique, and does not make it possible to recognise you | 1 year |
| myndchat_consentimento | Essential | Myndchat (first-party) | Your choice in each category, the moment it was made, the version of this notice, and an identifier for the record. Described in detail in section 8 | 6 months |
The language cookie is set on your very first visit, before any click of yours, because the decision about which language to serve has to be taken before the page exists. What it stores is the outcome of that decision — made from the language your browser announces — and then your own choice, if you switch languages in the selector.
The consent cookie is only set at the moment you answer the notice. If you never answer, it never exists.
This site does not use the browser's local or session storage. Both stay empty from the beginning to the end of your visit.
The technical name of the language cookie still carries the prefix of our previous brand. It will be renamed, and the change will show up here with a new version of this document — we would rather publish the name that is actually in your browser today than the name we wish were there.
6. Third-party services and data leaving Brazil
Today this site loads no third-party service at all. No data handled by a cookie on this site leaves Brazil, because there is nowhere for it to go: there is no external provider receiving anything from here.
That is a statement about the website and about cookies. The platform, once you have an account on it, uses providers that process data outside Brazil, and they are listed in the Privacy Policy with the role each one plays. These are separate things and it is only fair that you know the difference.
When the first third-party service arrives on this site, three things happen before it loads:
- it is declared in the Privacy Settings panel, with the provider, what it stores, for how long, in which country it processes the data, and a link to its own policy;
- it appears in the table in section 5 of this document, with a real measurement of what it stores in your browser — not with what the provider's documentation promises;
- this policy moves to a new version, which causes the notice to be shown again to everyone, including people who had already answered.
Until that happens, the Privacy Settings panel shows the empty categories as empty, and the international transfer filter returns a list with no items in it.
7. How to choose and how to change your mind
The notice appears on your first visit and offers three routes, with the same prominence and the same number of clicks:
| Option | What it does |
|---|---|
| Accept all | Turns on all three optional categories at once |
| Reject all | Leaves all three off, in one click, without needing to open anything else |
| Submit preferences | Records exactly the categories you left switched on, one by one |
Rejecting everything costs one click, the same as accepting everything. That is deliberate: a refusal button hidden behind two levels of menu is not a real refusal.
The More information link opens the Privacy Settings panel, where the same choices appear category by category and service by service, with a description of each one.
You can change your mind whenever you like, free of charge and in the same place. The Privacy preferences link, in the footer of every page, reopens the panel with your current choices already ticked. There is no deadline, no limit on how many times, and no need to justify yourself.
Revoking is not merely recording that you changed your mind: when you switch a category off, that category's cookies are deleted from your browser. A revocation that leaves the cookie in place would be decorative, and that is the kind of thing this document exists to prevent.
If you use more than one browser or more than one device, the choice applies per browser. Each one keeps its own cookie, and the notice will appear once in each.
8. The record of your choice
Anyone processing data on the basis of consent must be able to demonstrate that the consent existed, and under which text. That is what art. 8, § 1, of the LGPD requires. So we keep a record of your answer to the notice.
The record lives inside the consent cookie itself, in your browser, and contains:
| Field | What it is | What it is for |
|---|---|---|
| Record identifier | A code generated in your browser at the moment of the choice | Lets you ask us for the details of that choice without having to identify yourself another way |
| Moment | The date and time you answered | Shows when consent was given and when it reaches six months old |
| Notice version | The version of the text that was live when you decided | Evidence of which wording you responded to |
| Choices | On or off, in each of the three optional categories | This is the permission itself |
| Action and origin | Which button you used, and whether it was in the notice or in the panel | Distinguishes a blanket acceptance from a choice made item by item |
The identifier does not identify you. It is a random code pointing at the record of the choice, not at a person. It is shown to you inside the Privacy Settings panel, with a copy button, precisely so that you can write to us quoting it.
We ask again, and the notice reappears, in three situations:
- when this policy moves to a new version, because the earlier consent was given against a different text;
- when a new service arrives in any non-essential category, because your earlier choice did not cover it;
- every six months, so that consent given once does not last forever by inertia.
9. How to block cookies through your browser
Beyond our panel, your browser has controls of its own. They are broader: they apply to every site, not just this one.
In the most widely used browsers, those controls sit under Settings, in a section called Privacy and security, Tracking protection or something equivalent. From there you can delete cookies already stored, block third-party cookies, block all cookies, or ask for everything to be cleared when you close the browser.
What breaks if you block everything. The site keeps working and no content is hidden, but two things stop working: it stops remembering the language you chose and goes back to deciding from your browser's language on every visit, and the cookie notice reappears every time, because your answer is precisely what can no longer be stored.
Deleting this site's cookies through the browser also deletes the record of your choice. That is not a problem — it simply means we will ask again on your next visit, and the default goes back to everything switched off.
Some browsers also offer an automatic signal refusing tracking. Since there is no tracking on this site, that signal changes nothing here in practice today. If there ever is, it will be honoured.
10. Your rights
Data handled by cookies is personal data when it makes it possible, alone or combined, to reach you. The rights in art. 18 of the LGPD apply to it, and you can exercise them at no cost.
| Right | What you can ask for |
|---|---|
| Confirmation and access | To know whether processing exists and to access the data |
| Correction | To correct incomplete, inaccurate or out-of-date data |
| Deletion | To have data processed on the basis of your consent deleted |
| Information about sharing | To know who we share your data with |
| Information about refusing | To know what happens if you do not consent — and the answer is in section 3: nothing is blocked |
| Withdrawal | To withdraw consent at any time, through the panel in the footer |
| Objection | To object to processing that does not rely on consent |
To exercise any of them, write to privacidade@myndchat.com. Our Data Protection Officer, required by art. 41 of the LGPD, is Bernardo Prantz Pin, who can be contacted directly at encarregado@myndchat.com.
If you quote the consent record identifier, which is shown in the Privacy Settings panel, we can locate your choice without needing any other data about you.
You may also lodge a complaint with the Brazilian Data Protection Authority. Coming to us first is not a condition for that, but it usually resolves things faster.
11. Changes to this policy, and how to reach us
This policy changes when what it describes changes. The effective date and version number at the top of this page tell you which wording is live, and the previous version stays available.
A change that affects what you already authorised — a new service in an optional category, a new purpose, a new provider — does not take effect quietly: it moves the notice to a new version and the question is put to you again before anything loads.
Fixing wording, an example or a link does not move the notice version, because it changes nothing about what is stored in your browser.
| Subject | Address |
|---|---|
| Privacy and data subject rights | privacidade@myndchat.com |
| Data Protection Officer | encarregado@myndchat.com |
| Support and general questions | support@myndchat.com |
Myndchat is MYNDCHAT TECNOLOGIA LTDA, company number (CNPJ) 65.434.606/0001-80, registered at Avenida Brigadeiro Faria Lima, 1811, Sala ESC 1119, Jardim Paulistano, São Paulo/SP, 01452-001, Brazil.