Cookie policy
Last updated: September 24, 2026
Draft under legal review.
This page lists everything Baila stores in your browser — cookies, localStorage and sessionStorage — what it is for and who receives the data. Necessary items work without permission. Analytics and advertising only run after you allow them, and you can withdraw that permission at any time, as easily as you gave it.
Necessary
Keep you signed in, hold your cart and keep the site secure.
Baila
Data processed in: BrazilSign-in, language, cart, referrals and your cookie choice. Never shared for advertising.
| Name | Type | Duration |
|---|---|---|
| refresh_token_* | Cookie | 30 days |
| oauth_ctx | Cookie | Session |
| BAILA_LOCALE | Cookie | 1 year |
| baila_consent | Cookie | 1 year |
| baila_affiliate | localStorage | Until deleted |
| baila_affiliate_valid | localStorage | Until deleted |
| baila-checkin-device-id | localStorage | Until deleted |
| baila-checkin | IndexedDB | Until deleted |
| baila_ref | localStorage | Until deleted |
| baila_device_id | localStorage | Until deleted |
| baila.* | localStorage | Until deleted |
| baila.* | sessionStorage | Session |
| vdb_utm | sessionStorage | Session |
Analytics
Understand how the site is used so we can improve it.
PostHog
Data processed in: United StatesUsage statistics for the site and the dashboard. Without your permission it runs without storing anything in your browser.
| Name | Type | Duration |
|---|---|---|
| ph_*_posthog | Cookie | 1 year |
| ph_*_posthog | localStorage | Until deleted |
| __ph_opt_in_out_* | localStorage | Until deleted |
| ph_* | sessionStorage | Session |
Advertising
Measure and personalize Baila ads.
OpenAI Ads
Data processed in: United StatesMeasures whether a Baila ad led to a sign-up.
| Name | Type | Duration |
|---|---|---|
| __oppref | Cookie | 30 days |
| __obref | Cookie | 1 year |
| oaiq_cs:* | sessionStorage | Session |
| __cf_bmset on the vendor's domain | Cookie | Session |
| _cfuvidset on the vendor's domain | Cookie | Session |
* marks a prefix: the real name ends with an identifier.
How to change your choice
Use the button below or “Cookie settings” in the footer of any page. Withdrawing a permission deletes that vendor's cookies from your browser. Your choice lasts 12 months; after that, or when this list changes, we ask again.
Global Privacy Control (GPC)
If your browser sends the GPC signal, advertising is switched off automatically, even if you click “Accept all”.
International transfer
PostHog and OpenAI process data in the United States. For analytics and advertising cookies the transfer relies on your specific consent; for the account events sent by our servers, on contractual clauses with the vendor.