Cookie Policy
Last updated: 19 October 2026
This Policy explains which cookies and similar technologies are used on the vpa.pt website (the "Website"), what they are for and how each visitor can accept, refuse or change their preferences. The Website is operated by VPA – Sociedade de Advogados, SP, RL ("VPA"), with registered office at Rua Projectada à Matinha, Prédio A, 1.º B, 1950-327 Lisbon, Portugal.
1. What cookies are
Cookies are small text files that a website stores on the visitor's device. They make it possible, for example, to keep a secure session, remember preferences or measure how the website is used. They may be set by VPA (first-party cookies) or by other entities whose services the Website uses (third-party cookies), and they may last only for the session or remain on the device for a set period.
2. Applicable rules
Under Portuguese Law no. 41/2004 of 18 August, cookies that are strictly necessary for the Website to work may be used without consent. All others, including statistics cookies, are only used after the visitor accepts them in the banner shown on the first visit.
Refusing non-essential cookies does not prevent use of the Website.
3. Cookies used on the Website
3.1. Strictly necessary cookies
These ensure the Website works and is secure. They do not require consent, but they can be blocked in the browser settings, which may affect some features.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| vpa_session | VPA | Keeps the visitor's session while browsing | 2 hours |
| XSRF-TOKEN | VPA | Protects forms against forged requests | 2 hours |
| vpa_consent | VPA | Stores the choice made in the cookie banner | 6 months |
| __cf_bm | Cloudflare | Distinguishes human visitors from automated traffic and protects the Website against abuse | 30 minutes |
3.2. Statistics cookies
These help VPA understand how the Website is used, for example which pages are visited most, so that its content can be improved. They are only set after the visitor accepts them.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google (Google Analytics) | Distinguishes visitors for statistical purposes | 2 years |
| _ga_WCHW8FFMY3 | Google (Google Analytics) | Keeps the session state for statistical purposes | 2 years |
Google Analytics is provided by Google Ireland Limited. The data collected may be processed by Google in the United States under the EU-US Data Privacy Framework. More information at policies.google.com/privacy.
3.3. Embedded third-party services
Meetings with VPA lawyers are booked through Calendly, a service of Calendly LLC, shown in a window within the Website. So that booking is available, the Website loads a Calendly file that may set the __cf_bm security cookie on the calendly.com domain, lasting 30 minutes. Calendly's other cookies are only set when the visitor opens the booking window. These cookies are Calendly's responsibility and are described at calendly.com/privacy.
The Website also uses fonts and code libraries served by the Bunny Fonts and jsDelivr networks. These services receive the visitor's IP address in order to deliver the files, but do not set cookies.
4. Managing preferences
On the first visit, the cookie banner allows statistics cookies to be accepted or rejected, with equal prominence for both options. The choice can be changed at any time through the "Cookie settings" link in the footer of every page, or . If the visitor rejects after having accepted, the Google Analytics cookies are deleted.
Cookies can also be deleted or blocked in the browser settings, following each browser's instructions (Chrome, Safari, Firefox, Edge and others).
5. Changes
This Policy is updated whenever the cookies used on the Website change. The version in force is the one published on this page, with the date of the last update.
6. Contact
For any question about cookies or personal data, VPA can be contacted at [email protected].