Cookies are small files we store in your browser to make the site work, remember your preferences and, with your consent, measure performance and show you relevant communication. This policy details every cookie we use.
You can change your preferences at any time: .
1. Categories and consent
- Necessary — always active. The site cannot work without them (session, cart, CSRF protection).
- Preferences — only with your consent. They store non-essential choices (language, theme).
- Analytics — only with your consent. They help us understand how the site is used. Aggregated data, no name-level identification.
- Marketing — only with your consent. They measure campaigns and surface relevant content (when we activate Meta / TikTok).
2. Detailed inventory
2.1 Necessary
| Name | Provider | Purpose | Duration |
|---|---|---|---|
authjs.session-token | NQORO (Auth.js) | Keeps your session signed in | 30 days |
authjs.csrf-token | NQORO (Auth.js) | CSRF protection on authentication forms | Session |
authjs.callback-url | NQORO (Auth.js) | Returns you to the previous page after login | Session |
nqoro-guest-id | NQORO | Identifies a guest cart so your selection persists | 14 days |
nqoro_consent | NQORO | Stores your cookie choices (this very policy) | 1 year |
2.2 Preferences
| Name | Provider | Purpose | Duration |
|---|---|---|---|
NEXT_LOCALE | NQORO (next-intl) | Remembers your preferred language (es-MX / en-US) | 1 year |
2.3 Analytics
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga, _ga_* | Google Analytics 4 | Anonymous identifier for aggregated metrics | 13 months |
ph_*_posthog | PostHog | Anonymous ID for product events and funnels | 12 months |
Google Analytics initializes with Consent Mode v2. If you reject this category, scripts do not load in your browser.
2.4 Marketing (when active)
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_fbp, _fbc | Meta (Facebook / Instagram) | Conversion measurement and remarketing audiences | Up to 90 days |
_ttp | TikTok | Conversion measurement for campaigns | 13 months |
Meta and TikTok pixels only load if you accept the marketing category. Server-side events (Meta Conversions API, TikTok Events API) respect the same rule: no consent, no transmission.
3. Third-party cookies during payment
At checkout you may see additional cookies from Stripe (needed for fraud prevention) and, where applicable, Mercado Pago. They are placed during the checkout session and governed by each processor's own policy. Your card data never touches our servers.
4. Disabling cookies from your browser
Beyond our CMP banner, you can block or delete cookies from your browser settings (Chrome, Safari, Firefox, Edge). Note that blocking the necessary ones will prevent you from signing in or completing a purchase.
5. Changes to this policy
We update this policy whenever we add or remove providers. The last update date is shown above. If changes affect marketing or analytics categories, we will invite you to review your preferences.
6. Contact
Specific questions about cookies: privacidad@nqoro.com. Complaints with INAI (Mexican DPA): home.inai.org.mx.