Last updated: 2026-04-17

Cookie Policy

On this page

This Cookie Policy explains what cookies and similar technologies we use on itskooly.com, why we use them, and how you can control them. It complements our Privacy Policy.

We publish this document in English and Spanish and both versions are equally authentic. In case of inconsistency between the two versions, the Spanish version shall prevail for consumers domiciled in Chile; the English version shall prevail in all other cases. Nothing in this clause limits the non-waivable statutory rights of a consumer under the law of their country of habitual residence.

1. What cookies are

A cookie is a small text file that a website places in your browser to store information between visits. "Similar technologies" — such as localStorage, sessionStorage, and pixel tags — are treated the same way for the purposes of this policy whenever they achieve comparable outcomes (identifying a session, remembering a preference, measuring behavior).

Cookies are set either by us directly (first-party) or by a third-party provider whose code runs on our site (third-party).

2. How we use cookies on this site

We use cookies to keep the Site working, to remember your preferences, and — only after you opt in — to understand how the Site is used so we can improve it.

We never load analytics or session-recording scripts before you give consent through the cookie banner. If you select "Reject all" or simply "Strictly necessary", no optional cookies are set.

3. Categories

We group cookies into three categories.

  • Strictly necessary. Needed for the Site to work: authentication, checkout, fraud protection, and remembering your cookie-consent choice itself. These are always on because the Site cannot run without them. They do not require consent under GDPR because they serve a function you have requested (Art. 5(3) ePrivacy, recital 66 GDPR).
  • Analytics. Help us understand how visitors use the Site — which pages are visited, where clicks land, where users struggle. Set only if you opt in. We use Microsoft Clarity (session recording, heatmaps) and Vercel Analytics (Web Vitals and aggregate traffic).
  • Marketing. Reserved for future advertising or retargeting pixels. Currently none is in use. If we add any, we will update this policy and prompt you to renew consent.

The table below lists the specific cookies and similar storage items we use. Cookie names from third-party providers may vary over time; if a provider renames or adds one we will update this table at the next review.

Name Provider Category Purpose Duration
cookie_consent Kooly (first-party) Strictly necessary Stores your cookie-consent decision and the version of the consent you accepted. 12 months
Supabase authentication tokens Supabase (first-party for you, third-party code) Strictly necessary Keep you signed in between page loads. Session + refresh token lifetime
Turnstile challenge cookies Cloudflare (third-party) Strictly necessary Protect forms from automated abuse. Session
MercadoPago checkout session MercadoPago (third-party) Strictly necessary Carry the checkout session between the Site and MercadoPago's payment page. Duration of the checkout
_clck, _clsk and related keys Microsoft Clarity (third-party) Analytics Session recording, heatmaps, and aggregate behavior analysis. Input values are masked at the Clarity level. Up to 13 months
Vercel Analytics identifiers Vercel (third-party) Analytics Measure Web Vitals (load time, interactivity) and aggregate traffic. Session

Other values may be stored in localStorage or sessionStorage (for example, a temporary cart draft or the audio-player state). These are treated the same way as cookies in terms of consent: no optional storage is written before you opt in.

5. How to manage your preferences

You can change your choice at any time:

  • Use the "Manage cookie preferences" link in the Site footer. The preferences modal lets you accept or reject analytics independently; changes take effect immediately and optional scripts are unloaded on next page load.
  • Most browsers let you block or delete cookies from their settings. Blocking strictly-necessary cookies will break features like sign-in and checkout.
  • Browser extensions such as uBlock Origin and Privacy Badger can block third-party scripts. We support such tools; the Site degrades gracefully.

If you withdraw consent after previously accepting, we unload the optional scripts and stop setting new analytics cookies. Previously collected data is kept under the retention periods listed in our Privacy Policy.

6. Do Not Track

Browsers can send a "Do Not Track" (DNT) signal or, more recently, a Global Privacy Control (GPC) signal. Because there is no single standard for how sites must respond to DNT, we rely on the explicit choice made in our cookie banner. Where a browser sends a GPC signal, we treat it as a request to reject optional cookies and we will not load analytics or marketing scripts until you explicitly opt in through the banner.

7. Changes to this policy

We review this policy whenever we add, remove, or change a provider, a cookie category, or a retention period. The "last updated" date at the top reflects the most recent revision. Material changes — a new analytics or marketing provider, a new category, or a change to retention — trigger a fresh consent prompt so you can decide again.

8. Contact