Cookie Policy
Version 1.0 · Effective: 1 September 2026
Operator: LOSI Sp. z o.o. (LOSI SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ), ul. Korytnicka 46/52, 04-109 Warsaw, Poland; KRS 0001146588, REGON 540499518, NIP 1133154642. The Portuguese (Brazil) version controls.
1. Scope
This Policy explains cookies, pixels, local or session storage, URL parameters and similar technologies used on the official Partner Platform Website at https://stadami.club/ (Portuguese (Brazil)) and https://stadami.club/en (English), including the application form and dashboard. It forms part of the Privacy Policy and Terms of Use. Promoted websites, applications and services have their own technologies and policies.
2. Controller
LOSI Sp. z o.o. (LOSI SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ), ul. Korytnicka 46/52, 04-109 Warsaw, Poland; KRS 0001146588, REGON 540499518, NIP 1133154642 (LOSI, Operator or we) controls Platform technologies. AIRBPO Serviços e Tecnologia Ltda. (Administrator) administers payouts after LOSI confirms the amount earned; it does not set or control Platform cookies and does not receive general cookie or browsing data to execute payouts.
3. What these technologies do
Cookies and storage can remember language and consent, maintain a secure session, protect against abuse, balance traffic, measure Website use and campaign performance, and support advertising where permitted. Pixels and tags may initiate a request to a third party and read or write identifiers. Reward attribution uses Promo Code and account, event, payment, dashboard and backend records, and does not depend on a referral cookie or link.
4. Categories
Strictly necessary technologies support security, consent-choice memory, load balancing and requested authenticated access. Functional technologies remember optional preferences such as language. Analytics measures use and performance. Advertising measures campaigns and may support ads. LOSI does not classify Promo Code attribution as a cookie category because the Code and Qualifying Action are validated in server records.
5. Consent
On first visit, non-essential technologies remain off until you make a valid choice where required by law. The banner should offer Accept All, Reject Non-Essential and granular settings with equivalent prominence and no optional choices preselected. Strictly necessary technologies do not depend on consent because they provide a requested feature or protect the Platform, but remain subject to transparency and minimisation.
You can withdraw or change your choice at any time through Cookie Settings. Withdrawal affects future use; providers may retain earlier data for the disclosed lawful period. Where technically possible, we will remove accessible first-party optional cookies. The choice and its version may be recorded for up to six months to respect and demonstrate your preference.
6. Technology inventory
partner_consent: first-party, strictly necessary, stores your choice for up to six months. partner_locale: first-party, functional, remembers language for up to twelve months. Supabase authentication and session storage: strictly necessary when you sign in, lasting until logout or session end; a refresh token, where used, lasts up to thirty days, subject to rotation and revocation. Technical Vercel technologies may be used for security, delivery, load balancing and abuse prevention for the minimum necessary period.
_ga and _ga_<measurement-id>: Google Analytics 4 analytics identifiers, used only after consent where required, for up to two years. _fbp and _fbc: Meta measurement identifiers, used only after consent where required, for up to ninety days. Related tags or pixels follow the same consent category. These are maximum periods; deletion, provider configuration or a purpose change may end them sooner.
The Website does not use partner_ref, stadami_ref, an AppsFlyer/OneLink cookie or another referral cookie to attribute rewards. Provider-generated technical names may include suffixes, but the purpose, provider and maximum period must remain consistent with this inventory. LOSI will review and update this Policy before activating a new purpose, new non-essential third party or materially different period.
7. Promo Codes and attribution
Each Partner may receive an individual and exclusive Promo Code. When the Code is validly entered or applied in a Qualifying Action, the Platform may associate it with the event using account, payment, dashboard and backend records under the current Campaign rule. That association does not require a referral cookie to be stored on the Visitor's device.
Rejecting optional cookies does not by itself prevent Promo Code attribution. A missing, incorrect, expired or deactivated Code, use outside the Campaign, association with a prior account or inconsistent information may prevent attribution under the Terms and published rule. Any measurement or Code-validity period is shown on the Website, Campaign page or dashboard; this Policy does not create an attribution period.
8. Google Analytics 4
After analytics consent where required, Google Analytics 4 may process page and event data, browser or device information, approximate location and campaign parameters to measure Website use and performance. LOSI does not intentionally send PIX keys, bank details, identity documents, tax information, support content or the Partner's full Promo Code to Google Analytics. We configure events and retention proportionately and avoid direct identifiers.
9. Meta Pixel
After advertising consent where required, Meta Pixel may process page views, application submission and limited campaign events with browser or account-related identifiers for measurement and advertising. LOSI does not intentionally send PIX keys, bank details, identity documents, tax information, support content or the Partner's full Promo Code to Meta. You can withdraw the choice through Cookie Settings.
10. Authentication and security
Supabase authentication and session technology is used when a Partner signs in to the dashboard. Where cookies are used, the session should use Secure, HttpOnly and appropriate SameSite protections, rotation and revocation, together with session-hijacking controls. Security and network logs may record IP address, time, route and request outcome for the period stated in the Privacy Policy.
11. Browser controls
You may block or delete cookies through browser settings. Blocking necessary session technologies will prevent sign-in; blocking optional technologies should not prevent public browsing. Private mode, blockers and deletion may end a session, reset language or consent and limit analytics or advertising, but do not cancel attribution already validly recorded by Promo Code in the backend. Browser controls are not a substitute for a privacy-rights request.
12. Third parties and transfers
Google, Meta, Supabase, Vercel and a tag manager may receive data only for the purposes and after the choices described in this Policy and the Privacy Policy. The Administrator does not receive these data for payouts. International transfers follow LGPD article 33, ANPD Resolution CD/ANPD No. 19/2024 and, where applicable, the GDPR through a permitted mechanism or safeguard. Promoted sites may set their own technologies when you visit them; consult their policies.
13. Do Not Track and global signals
Browser Do Not Track signals do not have a uniform legal or technical standard. We do not claim to honour an unsupported signal. Where a legally binding opt-out or recognised signal applies and is technically implemented, it will be respected and documented; otherwise use Cookie Settings. A browser preference may not synchronise across devices, browsers or sessions.
14. Audit and changes
LOSI reviews Platform technologies periodically and after a material change to a provider, tag, purpose or period. This Policy and the consent tool will be updated before a new non-essential provider or purpose is activated. A material change receives prominent notice and, where required, a new choice. The applicable version and effective date remain available.
15. Contact
Controller and Operator: LOSI Sp. z o.o. (LOSI SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ), ul. Korytnicka 46/52, 04-109 Warsaw, Poland; KRS 0001146588, REGON 540499518, NIP 1133154642. Website: https://stadami.club/; English: https://stadami.club/en. Questions, privacy requests and complaints may be submitted through the forms available on the Platform or in the dashboard, or by post to LOSI's registered address.