Cookie Notice
What we store in your browser and how to control visitor analytics.
Version 1.3 · in effect since October 12, 2026
Courtesy translation. In case of divergence, the Portuguese version prevails. View Portuguese version
In plain language
- We use a necessary cookie to keep you signed in. Visitor analytics on the public website requires your permission.
- On the response screen, we locally store the point where you stopped, so you don't lose the study if the connection drops.
- With permission separate from website analytics, we use Google Ads to measure accounts with completed registration, professional activation after publishing a study, and demo requests attributed to ads, without personalization.
- You can allow or refuse each measurement separately and revoke your choice in Privacy preferences in the footer. DNT and GPC prevent ad measurement.
This summary helps to understand, but does not replace the text of the clauses below.
1. On the contractor's panel
- 1.1Authentication session cookie, strictly necessary. Without it, it's not possible to maintain login.
- 1.2Interface preferences, such as language, stored in the account and not in a tracking cookie.
- 1.3A technical tab identifier, in the browser’s session storage, to measure use of product features, without study content. It disappears when the tab is closed. Legal basis: legitimate interest.
2. On the respondent's screen
- 2.1Local storage with the study session identifier and the point where you stopped, to allow resuming from the same place if the page is closed or the connection drops.
- 2.2Local queue of unsent events, so that responses are not lost on an unstable network.
- 2.3This data remains in your browser and is discarded at the end of participation.
3. Optional measurement on the public website
- 3.1Google Ads loads only after your specific permission. It receives the conversion type, an opaque identifier to prevent duplicates, ad click identifiers and technical connection information such as IP and browser. We do not send names, email addresses, typed text, study content or private URLs.
- 3.2Signup and professional activation conversions take place in a separate, empty document, only when opening the dashboard home page without URL parameters or fragments. Signup requires completed registration and an account created within the past 24 hours; activation requires professional intent declared during registration and a published study in the original workspace within 90 days of account creation. Creating an example draft is not enough. We do not enable enhanced conversions or ad personalization.
- 3.3With permission, public website analytics uses random browser identifiers to distinguish visitors and sessions. It records page paths, clicks and scrolling, without typed text or URL parameters.
- 3.4Ad permission is stored in the browser for up to 180 days. Click identifiers and first-party attribution cookies last up to 90 days; opaque deduplication receipts, up to 180 days. Refusing or revoking stops measurement and deletes this local data. Google processes data already received according to its privacy policy (policies.google.com/privacy), including outside Brazil.
- 3.5Session records are retained for up to 30 days and aggregates for up to 90 days. Privacy preferences are kept for up to 180 days and can be revoked in the footer. DNT and GPC signals are respected.
4. On the customer’s website
- 4.1When the customer installs the UXTap tag or collector on its own website, it is the controller of the visitors’ data and is responsible for informing them and obtaining the necessary permission, including through its cookie banner.
- 4.2The behavior collector only starts after that permission and respects DNT and GPC signals.