Cookie Policy
Effective 30 August 2026
En Contacto is operated by Smart Digital Solutions LLC. This policy covers cookies and similar browser storage on www.encontacto.io and its subdomains, and forms part of our Privacy Policy.
Some of what we describe below is stored as cookies, and some in your browser's local storage. We list both, because the rules that matter treat them the same way.
Before you choose
When the page first loads, our cookie banner writes one value (getterms_init) to mark itself as loaded. Nothing else is stored, and no analytics or tracking requests are made, until you make a choice. We would rather say that precisely than claim we store nothing at all.
Strictly necessary
These make the site work and keep your account secure. They cannot be turned off.
| Name | What it does | Set by | Type | Duration |
|---|---|---|---|---|
__Secure-authjs.session-token | Keeps you signed in | En Contacto | Cookie | 30 days |
__Host-authjs.csrf-token | Protects forms against cross-site request forgery | En Contacto | Cookie | Session |
__Secure-authjs.callback-url | Returns you to the right page after you sign in | En Contacto | Cookie | Session |
__Secure-authjs.pkce.code_verifier | Secures sign-in with Google | En Contacto | Cookie | 15 minutes |
__Secure-authjs.state | Secures sign-in with Google | En Contacto | Cookie | 15 minutes |
__Secure-authjs.nonce | Secures sign-in with Google | En Contacto | Cookie | Session |
trusted_device | Remembers a device you have trusted, so two-factor does not ask again | En Contacto | Cookie | 60 days |
webauthn_challenge, webauthn_auth_challenge | Single-use values used when you sign in with a passkey | En Contacto | Cookie | 5 minutes |
lastActivityTime | Signs you out automatically after a period of inactivity | En Contacto | Local storage | Until cleared |
getterms_init | Marks the cookie banner as loaded | GetTerms | Local storage | Until cleared |
getterms_cookie_consent | Your cookie choices, when you made them, and an identifier for your browser | GetTerms | Local storage | Until cleared |
Functional
| Name | What it does | Set by | Type | Duration |
|---|---|---|---|---|
NEXT_LOCALE | Remembers the language you chose, so you do not pick it every visit | En Contacto | Cookie | 1 year |
Analytics
These are only set if you accept analytics cookies. If you refuse, or have not chosen yet, none of them are created and the Clarity script is never requested.
| Name | What it does | Set by | Type | Duration |
|---|---|---|---|---|
_clck | Recognises repeat visits as the same person | Microsoft Clarity | Cookie | 1 year |
_clsk | Joins the pages you view into a single recording | Microsoft Clarity | Cookie | 1 day |
ec_attribution | Records how you first found us | En Contacto | Cookie | 90 days |
ec_attribution_last | Records the most recent source that brought you here | En Contacto | Cookie | 90 days |
Clarity does not run on published digital cards or on connected custom domains, so people who visit someone's card are not recorded. Where it does run, masking is set to strict, and sign-in, sign-up, lead capture and card scanning forms carry additional explicit masking.
Advertising
These are only set if you accept advertising cookies. That is a separate choice from analytics — you can accept one and refuse the other. If you refuse, or have not chosen yet, none of them are created and neither script is requested.
| Name | What it does | Set by | Type | Duration |
|---|---|---|---|---|
_gcl_au | Links an advertisement you clicked to a purchase, so we can tell which ads work | Google Ads | Cookie | 90 days |
_fbp | Recognises your browser across visits for advertising measurement | Meta | Cookie | 90 days |
_fbc | Records that you arrived from a Meta advertisement | Meta | Cookie | 90 days |
These run on our own website only. Like our analytics, they are not loaded on published digital cards or on connected custom domains, so someone who opens a customer's card is never added to an advertising audience.
When you buy, we report the amount and the transaction reference to Google and Meta so a sale can be matched to the advertisement it came from. We do not send them your name or your email address.
Referral tracking
These only appear on our campaign page at /vip-backstage-status, and only if you have accepted analytics cookies.
| Name | What it does | Set by | Type | Duration |
|---|---|---|---|---|
kola.<campaign id> | Tracks who referred you to our waitlist | KickoffLabs | Cookie | 1 year |
.cid.data, .options.data | Supporting values for the same purpose | KickoffLabs | Local storage | Until cleared |
If you visited before 23 August 2026, older referral identifiers may still be in your browser. These are now removed the next time you visit any page other than the campaign page.
Payments
When you buy, checkout happens on Paddle, our Merchant of Record. Paddle sets its own cookies on its own checkout, under its own cookie policy. We do not control them and do not list them here.
Your choices
You can accept or reject non-essential cookies through our cookie banner, and change your mind later using the preferences link. Strictly necessary items cannot be rejected.
You can also block or delete cookies through your browser settings — each browser does this differently, so check its help pages. If you block them, parts of the site will not work.
Changes
We update this policy when what we use changes. The date at the top tells you which version you are reading.