This page lists everything Rico aos Poucos stores in your browser — cookies and local storage —, what each item is for, how long it lasts and how to turn it off. It complements the Privacy Policy and follows the guidance on cookies issued by the ANPD, Brazil's data protection authority.
The summary: we use cookies to keep you logged in, remember the language and protect the login against fraud; and we use audience measurement to know which pages are read. We do not use advertising cookies, we do not build profiles for advertisers and we do not sell any of it. Measurement can be turned off by you in one click (item 5).
1. What a cookie is, in one line
A cookie is a small text file that a site stores in your browser to remember something between one page and another — for example, that you are already logged in. Besides cookies, sites use local storage (localStorage), which works in a similar way but stays only on your device and is never automatically sent to the server.
2. Strictly necessary cookies
Without them the site does not work: there is no way to keep a session or protect the login. That is why they do not depend on
consent (art. 7, V, of the LGPD — performance of a contract). All of them are
HttpOnly (no script can read them), Secure and SameSite=Lax.
| Cookie | What for | Duration | Origin |
|---|---|---|---|
rap_u |
Keeps you logged in: stores your account identifier, cryptographically signed | 12 months | api.ricoaospoucos.com.br |
rap_a |
Lightweight registration from the days when you could comment without an account. Today commenting requires signing in with Google; this cookie only serves those who still edit or delete an old comment from that time | 12 months | api.ricoaospoucos.com.br |
rap_oauth_state |
Protects the Google login against cross-site request forgery (CSRF) attacks | 10 minutes | api.ricoaospoucos.com.br |
3. Functional cookies and storage
They keep your preferences so the site doesn't ask you the same thing every time.
| Item | Type | What for | Duration |
|---|---|---|---|
rap_lang | Cookie | Language chosen (Portuguese, English, Spanish), used to take you to the right edition of the site | 12 months |
rap:me, rap:me-cache | localStorage | Cache of your name and picture, so the header doesn't flicker on every page | Until you sign out or clear it |
rap:fav, rap:carteira, rap:carteira:privado | localStorage | Favorites and portfolio display preferences, including the mode that hides amounts | Until you clear it |
rap:fii-view, rap:acao-view, rap_pt_periodo, mpFxCcy and the like | localStorage | They remember how you prefer to see charts, periods, currency and tabs | Until you clear it |
rap:gate-pend, rap:vgate-pend, rap_onb_gate_dispensado | localStorage / sessionStorage | They remember that you already dismissed an invitation, so we don't insist | Session or until cleared |
rap_cookie_choice, rap_no_track | localStorage | They store your choice about audience measurement (item 5). Without them the notice would show up again and your refusal would be lost | Until you clear it |
rap_c_email, rap_c_name | localStorage | They fill in your name and e-mail automatically in the comment form | Until you clear it |
rap_auth_t | sessionStorage (Android app only) | Hands the login session over to the inside of the application | While the app is open |
rap_fcm_token, rap_fcm_erro | localStorage (app only) | They identify the device in order to deliver notifications, and record delivery failures | Until you clear it or uninstall |
rico-portfolio, rap_carteira_bf_v3, rap_ct_hoje_semdiv, rap_data_local | localStorage | Local cache of the portfolio and of data already downloaded, so the screen opens without waiting for the network | Until you clear it |
rico-lang, rap:me-social, rap:auth-state, rap:indice, rap:videoRate, rap_pt_modo, rap:fii-v5-view, rap_mp_news_seen_v1, rap_mp_interesse_v1, rico-custo-construcao-precos, wl-alertas-lidos, mpFxCcy | localStorage | Screen preferences: language, layout, video speed, currency, what you have already seen and values you typed into a calculator | Until you clear it |
| Service Worker cache (PWA) | Browser cache | Stores pages and files so the site opens fast and works even on a bad connection | Until the next version of the site |
4. Audience measurement
These serve to understand what is read, what is broken and what is worth improving. They do not identify you by name and they do not feed advertising.
| Item | Whose | What for | Duration |
|---|---|---|---|
rap_visitor_uid |
Ours (localStorage) | Random code that counts distinct visitors without knowing who they are. If you have an account, it allows linking your browsing to your dashboard | Until you clear it or turn off tracking |
rap_search_sid |
Ours (localStorage) | Groups searches from the same session, to measure whether search is delivering results | 30 days |
_ga, _ga_G-6XBNHTHSTW |
Google Analytics 4 | Aggregated audience metrics: pages viewed, source of the visit, device type | Up to 24 months (Google's default) |
The legal basis here is legitimate interest (art. 7, IX, of the LGPD): measuring our own audience in aggregated form, with no advertising and no sale of data. Even so, you can refuse — that's the next item.
5. How to turn it off
Here on the site
Use the button below. It turns off our audience measurement and Google Analytics in this browser, right away, and the choice is saved.
If the button doesn't respond (for example, with JavaScript disabled), you can achieve the same effect by manually
creating the key rap_no_track with the value 1 in the site's local storage,
through your browser's developer panel.
In your browser
- Every browser lets you block or delete cookies per site, and clear local storage, in the privacy settings;
- Private browsing discards everything when you close the window;
- Google offers an official Analytics opt-out add-on: tools.google.com/dlpage/gaoptout.
Heads up: blocking the cookies in item 2 breaks the login — you will not be able to comment or use the Portfolio. Blocking those in items 3 and 4 doesn't break anything; the site just forgets your preferences.
6. Third-party cookies when external content loads
Some pages embed content from outside, and those services may set their own cookies when you interact with them:
- YouTube — most videos use the no-cookie mode
(
youtube-nocookie.com); older embeds still use the standard player. In either one, when you hit play you start following Google's policy; - Google Fonts, jsDelivr, cdnjs — they deliver fonts and libraries; they log the request, with no profiling cookie;
- Cloudflare — may use a technical security cookie to tell legitimate traffic from an attack, and the hosting offers its own audience count (Cloudflare Web Analytics), which does not use an identification cookie.
We do not use Meta/Facebook Pixel, TikTok Pixel, Google Ads, remarketing networks or session recording tools.
7. Changes to this Policy
Whenever we switch a tool, this list is updated and the date at the top changes. If we start using any cookie that requires prior consent, we will ask for your consent before installing it.
8. Contact
Questions about cookies or about any data of yours: galera.org@gmail.com, subject "LGPD — cookies". We reply within 15 days.
The four documents work together
Terms of Use, Privacy Policy, Cookie Policy and Legal Notice form a single set. By using the site you accept all four.