Cookie Policy
Last updated:
Controlling language: English. Translations (e.g. Spanish, Portuguese) may be provided for convenience; if there is a conflict, the English version controls, except where mandatory local law requires otherwise.
Related documents: Privacy Policy | Terms of Service
1. What this Policy covers
This Cookie Policy explains how PixelPleno LTDA (“Leasdesk”, “we”, “us”) uses cookies and similar technologies (such as pixels, local storage, and SDKs) on:
- our marketing / landing websites; and
- our application (the “Service”).
The Service may be used in connection with customers in markets including the United States, Canada, Brazil, Mexico, Chile, Colombia, and the euro area countries, and may be accessible from other places.
For how we process personal data more broadly, see our Privacy Policy. This Cookie Policy gives cookie-specific detail.
2. What are cookies and similar technologies?
Cookies are small text files stored on your device when you visit a site or use an app. They often include a unique identifier.
We may also use:
- Local storage / session storage in your browser;
- Pixels / tags (small images or scripts that record that a page was opened);
- Mobile or web SDKs that collect device or usage signals similar to cookies.
In this Policy, “cookies” includes these similar technologies unless we say otherwise.
3. Who sets cookies?
- First-party cookies: set by Leasdesk on our domains.
- Third-party cookies: set by providers we use (for example payment-related domains). Their own policies also apply.
Payment processing is handled by Stripe (Leasdesk merchant account registered in Brazil). Stripe may set cookies or similar technologies on checkout or payment flows under Stripe’s terms and privacy notice.
Google Analytics 4 (gtag.js) sets first-party cookies on our domains (_ga, _ga_*) and sends page and event data to Google, only after you accept analytics cookies. It runs with its advertising features off: Google’s Consent Mode keeps advertising storage, advertising user data and ad personalization denied, and Google signals are off. In the application, it receives only the kind of page you are on: the page’s address pattern (such as /orgs/:orgId/units/:unitId) as its address and title, never the identifiers, searches, names or link tokens that the real address or title may hold; of the page you came from, only its site.
Microsoft Clarity runs on the marketing site only. Once you accept analytics cookies, it sets first-party cookies on our domains (_clck, _clsk) and records pages, clicks and sessions (including session replay), with its default masking of sensitive text. It does not run in the application. Microsoft may also set cookies on its own domains.
Cloudflare Turnstile runs a security check on the application’s sign-in, registration and password-recovery forms. It processes technical signals from your browser (such as the IP address, TLS fingerprint and user agent) to tell people from bots, which Cloudflare’s Turnstile privacy addendum calls strictly necessary for that purpose. It sets no cookies on our domains.
4. How we categorize cookies
4.1 Strictly necessary
Required for the site or Service to function and to keep it secure. Examples: session authentication, load balancing, CSRF protection, fraud prevention that is essential to the request, the security check on the application’s sign-in, registration and password-recovery forms, and storing your cookie-consent choice.
These do not require consent in most regimes, including where LGPD distinguishes essential processing. You can block them in your browser, but parts of the Service may stop working.
4.2 Preferences / functionality
Remember choices such as your language (en / es / pt / fr) and light or dark mode, and keep the setup wizard on your step when a page reloads. These preferences (the language, the light or dark mode, the currency shown on the plans, your device’s time zone and the wizard’s step) are set by your own choice or to show the Service as you asked for it. They are never used for analytics or advertising and are not among the cookie banner’s choices, so they stay on whatever you choose there.
4.3 Analytics / performance
Help us understand traffic, feature usage, errors, and performance on the marketing site and/or app, so we can improve Leasdesk. Tools: Google Analytics 4 (marketing site and application) and Microsoft Clarity (marketing site only).
These cookies stay off until you accept them, on the marketing site and in the application alike, and you can withdraw your consent at any time (Section 5).
4.4 Marketing / advertising
Used on marketing pages (if enabled) to measure campaigns or attribute signups. Tools: none.
We do not currently sell personal data. If we enable advertising cookies that constitute “sale” or “sharing” under US state laws, we will update this Policy and provide required opt-outs.
5. Consent and how to manage cookies
5.1 The cookie banner
On your first visit to the marketing site or the application, a banner asks for your choice with three buttons: Accept, Reject non-essential and Settings. Accepting and rejecting take one click each; Settings lets you choose by category.
- Strictly necessary, and the preferences in Section 4.2: always on.
- Analytics (Google Analytics 4 and Microsoft Clarity): off until you accept.
- Marketing / advertising: not used.
One choice covers leasdesk.com and the application on its subdomains. It is stored for 12 months in leasdesk-consent, a first-party, strictly necessary cookie (see Section 6). The banner asks again after 12 months, or when we add a tool or a category of cookies.
5.2 Changing or withdrawing your choice
You can change or withdraw your choice at any time through Cookie settings, at the bottom of every page of the marketing site and, in the application, in the account menu and on the sign-in and registration pages.
A withdrawal stops Google Analytics 4 and Microsoft Clarity from loading, asks Clarity to erase its cookies, and deletes from our domains the analytics cookies listed in Section 6.
Withdrawing consent does not affect the lawfulness of processing before withdrawal.
5.3 Record of your choice
Each time you make or change a choice, we keep a record of it on Leasdesk’s servers: a random identifier (also kept in the leasdesk-consent cookie), the choice, the version of this Cookie Policy, the site (the marketing site or the application) and the time. The record holds no IP address and is not linked to an account. We keep each record for 5 years.
5.4 Browser controls
Most browsers let you block or delete cookies. See your browser help for instructions. Blocking all cookies may break login and security features.
5.5 Global Privacy Control / US opt-outs
If we become subject to US state “sale”/“share” rules and recognize Global Privacy Control (GPC) or similar signals, we will honor them as required and describe that here: Privacy Policy.
5.6 Do Not Track
There is no consistent industry standard for “Do Not Track” browser signals. We do not respond to DNT at this time, except as we adopt GPC or legal opt-out mechanisms above.
6. Cookie inventory
Durations are approximate and may vary by release. Entries marked local storage or session storage live in your browser’s storage rather than as cookies (see Section 2).
6.1 Marketing / landing site
| Name / pattern | Provider | Category | Duration | Purpose |
|---|---|---|---|---|
leasdesk-consent |
Leasdesk | Strictly necessary | 12 months | Remember your cookie choice, the version of this Policy it was made under and its record’s random identifier; shared by the marketing site and the application |
leasdesk-consent-probe |
Leasdesk | Strictly necessary | A few seconds | Find the domain your cookie choice can be shared on; deleted at once |
leasdesk-locale (local storage) |
Leasdesk | Preferences | Until you clear it | Remember the language you picked |
leasdesk-locale |
Leasdesk | Preferences | Up to 400 days | Remember the language you picked, so / can open in it before scripts run |
leasdesk-currency (local storage) |
Leasdesk | Preferences | Until you clear it | Remember the currency shown on the plans |
_ga |
Analytics | 2 years | Distinguish visitors | |
_ga_* |
Analytics | 2 years | Persist the Google Analytics session | |
_clck |
Microsoft | Analytics | 1 year | Distinguish visitors (Clarity) |
_clsk |
Microsoft | Analytics | 1 day | Persist the Clarity session |
The language you pick is stored as leasdesk-locale (a cookie and local storage) so the next visit to / opens in that language. The Google and Microsoft cookies in this table are set only after you accept analytics cookies. Google Analytics 4 sets _ga and _ga_* on this site’s domain and sends usage data to Google. Microsoft Clarity sets _clck and _clsk on this site’s domain and records sessions (including replay) for Microsoft.
6.2 Application (authenticated Service)
| Name / pattern | Provider | Category | Duration | Purpose |
|---|---|---|---|---|
.AspNetCore.Identity.Application |
Leasdesk | Strictly necessary | 14 days, renewed while you use the Service | Keep you signed in securely |
leasdesk_redirect |
Leasdesk | Strictly necessary | 1 day | Return you to the page you asked for after signing in |
leasdesk-consent |
Leasdesk | Strictly necessary | 12 months | Remember your cookie choice, the version of this Policy it was made under and its record’s random identifier; shared by the marketing site and the application |
leasdesk-consent-probe |
Leasdesk | Strictly necessary | A few seconds | Find the domain your cookie choice can be shared on; deleted at once |
PARAGLIDE_LOCALE |
Leasdesk | Preferences | Up to 400 days | UI language |
LEASDESK_LOCALE_CHOSEN |
Leasdesk | Preferences | Up to 400 days | Remember that you picked a language on this device, so your account’s language does not override it |
leasdesk-zone |
Leasdesk | Preferences | 1 year | Your device’s time zone, so a page shows times on your clock as it loads |
theme (local storage) |
Leasdesk | Preferences | Until you clear it | Remember the light or dark mode you picked |
leasdesk.setup.* (session storage) |
Leasdesk | Preferences | Until you close the tab | Keep the setup wizard on the step you moved to when the page reloads |
_ga |
Analytics | 2 years | Distinguish visitors | |
_ga_* |
Analytics | 2 years | Persist the Google Analytics session |
The Google cookies in this table are set only after you accept analytics cookies. Google Analytics 4 sets _ga and _ga_* on the application the same way as on the marketing site, and learns only the kind of page you are on (Section 3). Microsoft Clarity does not run in the application.
6.3 Payments (Stripe-hosted or embedded)
| Name / pattern | Provider | Category | Duration | Purpose |
|---|---|---|---|---|
| Per Stripe documentation | Stripe | Strictly necessary / as Stripe classifies | Per Stripe | Checkout, fraud prevention, payment security |
See Stripe’s cookie/privacy documentation for current details. Leasdesk does not control all cookies on Stripe-hosted pages.
7. Personal data and cookies
Cookie identifiers and related technical data (such as IP address, device type, and page URLs) may be personal data. We process them under our Privacy Policy, for purposes including security, providing the Service, analytics (only with your consent), and legal compliance.
Product note (not cookie-configurable): In the Service, photos are public in the product contexts where they are shown; other uploads are private. That visibility rule is separate from cookie settings.
8. International transfers
Cookie data may be processed in Brazil and in other countries where we or our providers operate (Microsoft Azure, West US 3, United States), including by Google and Microsoft for analytics and on Cloudflare’s global network. Safeguards are described in the Privacy Policy.
9. Retention
We keep cookie-derived data only as long as needed for the purposes above:
- consent records: 5 years from each choice;
- sign-in records (account, IP address and time of each sign-in): 6 months, also after an account is deleted, as Brazil’s Marco Civil da Internet (Law 12.965/2014, art. 15) requires;
- other server logs, and Cloudflare’s request logs: up to 30 days.
Browser cookies expire according to the Duration column in Section 6, or when you delete them.
10. Children
The Service and marketing site are directed to business and property-management audiences, not children. We do not knowingly use cookies to solicit data from children. See the Privacy Policy.
11. Changes
We may update this Cookie Policy by posting a revised version and changing the “Last updated” date. If we add a non-essential tool or category of cookies, the banner asks for your choice again.
12. Contact
Privacy / cookies: privacy@leasdesk.com
Legal: legal@leasdesk.com
Company: PixelPleno LTDA, CNPJ 62.416.625/0001-96, São Paulo, Brazil