Cookie Policy

Last updated: May 16, 2026

This Cookie Policy explains how Visto n' Visa, LLC ("Visto n' Visa", "we") uses cookies, pixels, local storage, session storage, limited fingerprinting, and similar technologies (collectively, "Cookies") on the website vistonvisa.com and its versions in other languages, subdomains, and applications (the "Services"). This Policy is incorporated into our Privacy Policy.

1. What are Cookies

1.1. Cookies are small text files with a unique identifier, placed by a browser on your device (computer, phone, or tablet) when you visit a website. They allow the site to recognize your browser, remember your preferences, maintain authenticated sessions, measure audience, and personalize the experience.

1.2. Similar technologies include, among others: local storage and session storage (data stored within the browser itself), web beacons and tracking pixels (1×1 pixel images used to track email opens or page views), SDKs in mobile applications, and platform advertising identifiers (IDFA on iOS, AAID on Android).

2. Cookie classification

2.1. For purposes of this Policy, we classify Cookies into four categories, in accordance with the international standard adopted by European data protection authorities and the UK ICO:

• Strictly necessary (essential) — indispensable to the functioning of the Services (session management, authentication, security, load balancing, fraud prevention, cookie consent). No consent is required; disabling them impairs Service operation.
• Performance and analytics — measure audience, traffic, bottlenecks, and experience quality, generally on an aggregated and/or pseudonymized basis.
• Functional — remember preferences (language, currency, layout, theme) and enhance the experience without being essential.
• Marketing and advertising — campaign attribution, remarketing, conversion optimization, advertising ROI measurement, and ad personalization on third-party platforms.

2.2. By origin, cookies may be first-party (set directly by Visto n' Visa) or third-party (set by providers integrated into the Services, such as Google, Meta, or Hotjar). By duration, they may be session cookies (deleted when the browser is closed) or persistent cookies (with a defined expiration date).

3. Cookies used in the Services

3.1. The table below describes the Cookies typically used in the Services. The Cookies actually active in your session may vary depending on the features you access, active integrations, and your consent preferences.

3.1. Strictly necessary

3.2. Performance and analytics

3.3. Functional

3.4. Marketing and advertising

3.2. Do Not Track policy. Our ecosystem honors the Global Privacy Control (GPC) signal when emitted by a browser, treating it as a valid opt-out instruction for California residents under the CCPA/CPRA. The generic browser DNT signal is treated equivalently whenever technically feasible.

4. Legal basis

4.1. Strictly necessary Cookies are used on the basis of legitimate interest (LGPD art. 7, IX; GDPR Art. 6.1.f) or performance of a contract (Art. 6.1.b), as they are indispensable to providing the Services.

4.2. All other categories (performance, functional, marketing) are used on the basis of consent (LGPD art. 7, I; GDPR Art. 6.1.a), expressed by an affirmative action in the consent banner.

5. How to manage your consent

5.1. Consent banner. On your first access to the Services, we display a banner where you may "Accept all," "Reject non-essential," or customize your preferences by category.

5.2. Review and withdrawal. You may review and withdraw your consent at any time via the "Cookie Preferences" link in the Services footer. Withdrawal is not retroactive with respect to processing already carried out, but stops any new processing based on the withdrawn categories.

5.3. Browser settings. You may also block or delete cookies directly in your browser. Reference guides:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Edge
• Opera

5.4. Impact of disabling cookies. Disabling essential cookies prevents login, cart, payment, security, and other authenticated features from functioning. Disabling performance/functional cookies reduces personalization and measurement. Disabling marketing cookies may result in less relevant ads on other platforms, but does not reduce the total volume of ads served by third parties.

6. Opt-out of behavioral advertising

6.1. To limit cross-context behavioral advertising on third-party platforms, you may use:

• Digital Advertising Alliance (USA): optout.aboutads.info;
• Network Advertising Initiative: optout.networkadvertising.org;
• European Interactive Digital Advertising Alliance: youronlinechoices.eu;
• Google Ads Settings: adssettings.google.com;
• Meta Ads Preferences: accountscenter.facebook.com/ads.

7. International transfers

7.1. Third-party providers listed in this Policy may process data in jurisdictions outside of Brazil and the EU/UK, particularly in the United States. The applicable safeguards are described in Section 7 of the Privacy Policy.

8. Updates to this Policy

8.1. This Policy may be updated to reflect changes in the technologies we use, integrations with third parties, or applicable rules. The date of the last update appears at the top of this page.

9. Contact

Data Protection Officer (DPO)
Visto n' Visa, LLC — 169 Madison Avenue, New York, NY 10016, USA
Email: [email protected]