Privacy notice
This is an English summary. The authoritative document is the Portuguese Política de Privacidade, last updated June 4, 2026, which covers the LucraLink Capture Chrome extension.
What is collected
Collection happens only when you explicitly trigger session capture (the "Connect Mercado Livre session" button in the extension popup) while logged into the Mercado Livre affiliate panel. At that moment the extension reads your Mercado Livre session cookies (including the httpOnly authentication cookie), the CSRF token from the affiliate panel page, and the product context (URL and your affiliate tag) needed to build the link. Converting a single product link, without capturing a session, does not collect cookies or session secrets.
Why
The sole purpose is generating your own affiliate links automatically, by letting the LucraLink backend call the Mercado Livre affiliate APIs as if you were doing it yourself from the panel. Data is never used for profiling, advertising, or sale to third parties.
Storage and sharing
Session data travels over HTTPS to LucraLink's backend on Supabase and is stored encrypted in Supabase Vault, a restricted-access secrets store; cookies and the CSRF token are never exposed in the panel UI or in logs. LucraLink does not share, sell, or rent this data to third parties.
Revoking access
You can end access at any time: remove the Mercado Livre credential from the panel's credentials area (this deletes the stored session from the Vault), log out of Mercado Livre (the captured cookies stop being valid), or uninstall the LucraLink Capture extension from Chrome.
Data subject rights (LGPD)
Brazilian users can request confirmation, access, correction, anonymization, deletion, or portability of their personal data at any time, per Lei 13.709/18 (LGPD). Full details are in the Portuguese Terms of use and Privacy policy.
Contact
Questions about this notice or your data go to suporte@lucralink.com.br.