Cookie policy

Non-binding draft. Working document. It is not legal advice. It must be reviewed and validated by a licensed attorney in the applicable jurisdiction before it is published. [PENDIENTE: legal-compliance. Remove this block only once an attorney validates the document.]

This is a courtesy translation. The Spanish version is the one that governs.

A cookie is a small file a site saves in your browser to remember something. "Local storage" works in a similar way, but it stays in your browser and isn't sent with every visit.

Here's exactly what we store. The person who runs AlergiScan, located in Zapopan, Jalisco, Mexico, is responsible for all of these cookies. Their identification and contact details, and how we handle your data in general, are in the Privacy notice. If you have questions about this policy, email us at rodrigo.delatorre91@gmail.com.

On alergiscan.com

We don't use advertising, analytics or third-party cookies. That's why we don't show you a banner to accept them: we only use what the site needs to work.

NEXT_LOCALE

• What it does: remembers the language you see the site in (Spanish or English).
• Type: first-party, essential cookie.
• When it's set: when you choose another language or open a page in a language different from your browser's.
• Duration: session; it's deleted when you close your browser.
• What it contains: only the language code (es or en).

theme (local storage)

• What it does: remembers whether you chose the light, dark or system theme.
• Type: first-party local storage, preference.
• When it's set: only if you change the theme with the selector.
• Duration: until you delete it from your browser.
• What it contains: only light, dark or system. It's never sent to our servers.

When the site loads, our hosting provider receives technical data such as your IP address and browser type, without setting cookies. Fonts are served from our own domain.

In the web app (app.alergiscan.com)

To sign in, the web app also uses these first-party cookies, which your account needs to work:

• better-auth.session_token: keeps you signed in and protects your account. Lasts up to 30 days or until you sign out. On secure connections its name starts with __Secure-.
• better-auth.dont_remember: only used if you choose not to stay signed in. Session cookie.
• better-auth.last_used_login_method: remembers how you signed in last time (email, magic link, passkey or Google) to show it first. Lasts 30 days.
• sidebar-collapsed: remembers whether you collapsed the side menu. Lasts 1 year.
• NEXT_LOCALE: remembers the app language. Session cookie.

When you pay for a subscription, manage your billing or cancel it, you do it on Stripe pages, which use their own cookies under Stripe's privacy policy.

In the iPhone and Android apps

The apps don't use cookies. Your session is kept in your phone's secure storage and is deleted when you sign out or uninstall the app.

How to delete or block cookies

You can delete cookies and local storage from your browser settings, usually under "Privacy" or "Site data". You can also block them. If you block alergiscan.com's, the site works the same but won't remember your language or theme. If you block app.alergiscan.com's, you won't be able to sign in.

If this changes

If we ever add analytics or any non-essential cookie, we'll update this policy first and ask for your permission with a notice where accepting and declining carry the same weight. Those tools won't load until you accept.

This policy is also available in Spanish. If the versions differ, the Spanish version governs.