Cookie Policy

Short version: this site uses no analytics or advertising cookies, and loads nothing from third parties that follows you. That is why you will not see a consent banner: there is nothing to consent to. The application does store a few things in your browser, all of them needed for it to work.

This site (meruma.app)

There are no first-party or third-party cookies. No Google Analytics, no Meta pixel, no other measurement tool. Fonts are served from our own server, so there are no requests to external font providers either.

The only thing that happens when you arrive is that, if you open the root of the site, we look at the language your browser declares in order to send you to the English, Spanish or Portuguese version. That reading stores nothing and leaves no trace.

The application (my.meruma.app)

So you can sign in and work, the application stores information in your browser’s local storage. These are not tracking cookies: without them you could not use the product.

What is stored	What for	How long
Amazon Cognito session data	Keeping you signed in	Until you sign out
Chosen language	Showing the interface in your language	Until you change it
Last organization used	Opening where you left off	Until you clear it
Section order on the contact panel	Respecting how you arranged it	Until you change it
Temporary state when connecting Google, Microsoft or Meta	Verifying the sign-in round trip is legitimate	Cleared when it finishes

You can clear all of this from your browser settings. If you do, you will need to sign in again.

Public forms

When someone fills in a form published with meruma, we store a temporary session identifier in their browser so nothing is lost between steps, and we record their IP address to prevent automated submissions. For that same purpose we use Cloudflare Turnstile, which analyses browser signals without identifying the person or following them across other sites.

Websites our customers publish

With meruma, an organization can publish its own website. If it embeds third-party analytics, maps or video, those services may set their own cookies. That decision and its consent banner are the responsibility of the organization publishing the site, not ours.

Email campaigns

Campaign emails sent by our customers include a one-pixel image that reports whether the message was opened, and links carrying parameters to measure clicks. This is standard practice in commercial email and the party using it is the organization sending the campaign; you can avoid it by blocking image loading in your email client, or unsubscribe from the link in the footer.

If this changes

If we ever add analytics to the site, we will update this page and a banner will appear so you can accept or reject it, with rejecting as easy to reach as accepting.