Cookies Policy
Last updated: October 2026
This policy explains what cookies and browser storage (local and session storage) we use on caocomcao.pt, what information is read from your device, for what purpose, and how you can manage your preferences.
1. Strictly necessary
We use strictly necessary cookies and browser storage to provide the services you ask us for: signing in, keeping the language you chose, resuming a booking part-way through, keeping your shop basket, remembering your cookie choice and protecting the contact form from spam. We do not ask for your consent for these items.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| __Secure-authjs.session-token | Cão com Cão | Keeps you signed in after you log in to your account. | 30 days |
| __Host-authjs.csrf-token | Cão com Cão | Protects sign-in against forged requests from other sites. | Browser session |
| __Secure-authjs.callback-url | Cão com Cão | Remembers the page to return you to after you sign in. | Browser session |
| __Secure-authjs.pkce.code_verifier | Cão com Cão | Only created when you sign in with Google: it links the request sent to Google to the response received, to protect sign-in. | 15 minutes |
| NEXT_LOCALE | Cão com Cão | Remembers the language you chose on the site. Only created when that language differs from your browser's language. | Browser session |
| ccc-booking-draft-token | Cão com Cão | When you reach the sign-in step part-way through a booking, links you to the draft saved on our server, so you can resume the booking after signing in. | 2 hours |
| ccc-cart-session | Cão com Cão | Keeps your shop basket while you are not signed in, so it is not lost when you reload the page. | 30 days |
| ccc_cookie_consent (local storage) | Cão com Cão | Keeps your choice about the optional analytics, so we do not ask you again on every visit. | Until you clear the site's data |
| ccc-booking-draft (session storage) | Cão com Cão | Keeps the booking steps you have already completed in this tab. | Until the tab is closed |
| Cloudflare Turnstile | Cloudflare | Protects the contact form from spam. Cloudflare reads your IP address and browser characteristics (TLS fingerprint and User-Agent) and runs JavaScript checks to tell people apart from bots. Only loaded on the contact page. | No storage documented by Cloudflare; signals read at each check |
In this category, Cloudflare (Turnstile, on the contact page only) is the only third party that stores or reads information on your device. If you choose «Continue with Google» to sign in, you are taken to Google, where Google's own cookie policy applies.
2. Analytics (optional)
We use PostHog (EU Cloud, Frankfurt) to measure site traffic. PostHog keeps its state only in the page's memory: it keeps nothing on your device, and visits and events are recorded without individual identification. PostHog's session recording, an optional feature, is only switched on with your express consent. You can withdraw consent at any time via «Cookie preferences» in the footer; withdrawal takes effect from the next page load.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| PostHog | PostHog | Measures visits and use of the site without individual identification. With your consent, it also records your session on the site. | Nothing is kept on your device |
3. Marketing
We do not use marketing cookies or third-party tracking pixels. Any addition to this category will be preceded by a new version of this policy.
4. Managing preferences
You can change your choice at any time via «Cookie preferences» in the site footer. This option covers only the optional analytics described in section 2 (PostHog session recording). You can also block or delete cookies and site data in your browser settings. If you block the strictly necessary cookies and storage, you may no longer be able to sign in or make bookings.
5. Contact
For questions about cookies or privacy, contact us at privacidade@caocomcao.pt.