Last updated: January 1, 2025
Cookies are small text files that a website places on your device (computer, tablet, or phone) when you visit the site. They are widely used to make websites work more effectively, to remember your preferences, and to provide information to website operators about how visitors use the site.
Similar technologies include web beacons (also called tracking pixels or pixel tags) — tiny transparent images embedded in web pages or emails that register when your device accesses a page — and local storage, which is a browser-based data store that functions similarly to cookies but with a larger storage capacity and no automatic expiry. Where this Cookie Policy refers to "cookies," the same principles apply to these similar technologies.
Cookies placed by Mango (mangxo.org) are called "first-party cookies." Cookies placed by third-party services that Mango uses (such as analytics providers) are called "third-party cookies." Both types are described in this policy.
Mango uses cookies on mangxo.org for the following general purposes:
Essential Platform function: Some cookies are required for the Platform to work at all. These include session cookies that keep you logged in as you navigate between pages, security tokens that protect against cross-site request forgery (CSRF) attacks, and cookies that maintain the state of your shopping cart and order flow. Without these cookies, the Platform cannot function correctly.
Performance and analytics: We use analytics cookies to understand how visitors use mangxo.org — which pages are visited, how long visitors stay, where they arrive from, and which features are used most. This information is collected in aggregate form and is used to identify where the Platform's user experience can be improved. Analytics cookies do not track you across other websites.
Functional preferences: Preference cookies remember choices you make on the Platform, such as your language preference, whether you have dismissed the cookie consent banner, and display settings. These cookies improve your experience by saving you from re-entering preferences on each visit.
Security monitoring: Certain cookies support our fraud detection and security monitoring systems. These cookies help us identify login attempts from unusual locations, detect automated bot activity, and flag account access patterns that deviate from normal usage for the account. These cookies are considered essential for Platform security.
The following table describes the specific cookies currently in use on mangxo.org. Cookie names may change with Platform updates; this list is reviewed and updated periodically.
Cookie name: mango_session
Purpose: Maintains your authenticated session on the Platform. Without this cookie, you would be logged out on every page navigation. This cookie is deleted when you close your browser (session cookie) or after 24 hours of inactivity, whichever comes first.
Duration: Session / 24 hours
Type: First-party, HttpOnly, Secure
Cookie name: mango_csrf
Purpose: Contains a cryptographic token that protects form submissions against cross-site request forgery attacks. This token is verified with every POST request to ensure the request originates from the Platform and not from a malicious third-party site.
Duration: Session
Type: First-party, HttpOnly, Secure
Cookie name: mango_cart
Purpose: Stores the contents of your order cart between page navigations. This allows you to start an order, browse the supplier catalogue, and return to your cart without losing items. The cart is also saved to your account if you are logged in.
Duration: 7 days
Type: First-party
Cookie name: mango_consent
Purpose: Records whether you have accepted or declined non-essential cookies through the Mango cookie consent banner. If you accept, this cookie stores your acceptance so the banner does not reappear on subsequent visits. If you decline, this cookie records your decline and prevents non-essential cookies from being set.
Duration: 365 days
Type: First-party
Cookie name: mango_security_fp
Purpose: A non-identifying device fingerprint token used by our fraud and security monitoring system to detect unusual login patterns. This cookie does not identify you by name or email — it creates a pseudonymous identifier for the combination of browser, operating system, and network characteristics of your session. It is used only for security purposes and is not shared with third parties for advertising.
Duration: 30 days
Type: First-party, HttpOnly, Secure
Cookie name: _ga (Google Analytics)
Purpose: Distinguishes unique visitors to mangxo.org. Assigns a randomly generated Client ID to your browser, which allows Google Analytics to calculate visit counts, session duration, and page view counts accurately. The Client ID is not linked to your Mango account or personal identity. Mango uses Google Analytics with IP anonymization enabled, which truncates the last octet of your IP address before it is stored by Google.
Duration: 2 years
Type: Third-party (Google LLC)
Cookie name: _gid (Google Analytics)
Purpose: Used by Google Analytics to distinguish users on a 24-hour basis. Supplements the _ga cookie for same-day usage analysis.
Duration: 24 hours
Type: Third-party (Google LLC)
Cookie name: _gat_UA (Google Analytics)
Purpose: Used to throttle the request rate to Google Analytics servers, limiting data collection to a manageable volume.
Duration: 1 minute
Type: Third-party (Google LLC)
Cookie name: mango_analytics_id
Purpose: A Mango first-party analytics cookie that supplements Google Analytics for Platform-specific event tracking. Records which order flows are started and completed, which catalogue filters are used, and which Platform features are accessed. Data is analyzed in aggregate to guide Platform improvement decisions.
Duration: 90 days
Type: First-party
Cookie name: mango_prefs
Purpose: Stores user interface preferences including the display currency format, preferred measurement units (metric vs. imperial for material quantities), and dashboard panel layout configuration. Enables the Platform to present information in your preferred format without requiring configuration on each login.
Duration: 365 days
Type: First-party
Cookie name: mango_lang
Purpose: Stores your language preference for the Platform interface. Currently the Platform is available in Spanish (Mexico) and English. This cookie ensures the Platform displays in your selected language on return visits.
Duration: 365 days
Type: First-party
Cookie name: mango_tour_seen
Purpose: Records whether you have completed or dismissed the Platform onboarding tour that appears for new accounts. Prevents the tour from reappearing on subsequent logins after it has been dismissed.
Duration: 365 days
Type: First-party
In addition to cookies placed directly by Mango, certain third-party services integrated into the Platform may set their own cookies. These third parties have their own privacy and cookie policies, and Mango does not control how they process data collected through their cookies.
Google Analytics (Google LLC): Used for website traffic analysis. Google's privacy policy is available at policies.google.com/privacy. Google Analytics data is processed under a Data Processing Amendment with Google. Mango uses IP anonymization and does not enable Google's advertising features. Google Analytics data is stored in the United States.
Conekta (Conekta Payments S.A.P.I. de C.V.): Mango's payment processor. When you proceed to the payment screen, Conekta's payment widget is loaded and may set cookies associated with the payment session. These cookies are necessary for secure payment processing and expire at the end of the payment session. Conekta's privacy policy is available at conekta.com/legal/privacy.
Intercom (Intercom, Inc.): Used for in-Platform customer support chat. If you use the support chat feature, Intercom sets cookies to maintain the chat session and remember your conversation history. Intercom's cookie policy is available at intercom.com/legal/cookies. You can opt out of Intercom tracking by not using the chat feature.
Mango does not use cookies for advertising targeting, behavioral profiling for ad purposes, or cross-site tracking. Third-party advertising networks do not have access to Mango's cookie data.
Session cookies are temporary files that exist only during your current browser session. They are automatically deleted when you close your browser or when the session times out due to inactivity. Session cookies are used for maintaining your login state, protecting form submissions, and tracking the steps in your current order flow.
Persistent cookies remain on your device after you close the browser, until their expiry date is reached or until you delete them manually. They are used to remember your preferences across visits, record your cookie consent decision, and support analytics tracking of returning visitor patterns. Persistent cookies set by Mango range in duration from 24 hours (for the daily analytics identifier) to 365 days (for preference and consent cookies).
You can view and manage all cookies stored by mangxo.org through your browser's developer tools. In Chrome: Settings > Privacy and Security > Cookies and other site data > See all cookies and site data. In Firefox: Tools > Browser Tools > Web Developer Tools > Storage tab. In Safari: Preferences > Privacy > Manage Website Data.
When you first visit mangxo.org, you will see the Mango cookie consent banner at the bottom of the screen. You may accept all cookies or decline non-essential cookies. Your choice is recorded in the mango_consent cookie and honored on all subsequent visits until you change your preference.
To change your cookie preferences after the initial banner is dismissed, you can:
Through the Platform: If you are logged in, visit Account Settings and locate the Privacy and Cookie Preferences section. You may toggle non-essential cookie categories on or off from this screen. Changes take effect immediately and are reflected in the mango_consent cookie.
Through your browser: All major browsers allow you to view, manage, and delete cookies. Browser settings also allow you to block specific categories of cookies or all cookies. Note that blocking essential cookies will prevent the Platform from functioning correctly — you will not be able to log in or complete orders if session and CSRF cookies are blocked.
Google Analytics opt-out: You can opt out of Google Analytics tracking across all websites by installing the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout. This add-on prevents Google Analytics JavaScript from sharing visit information with Google.
If you delete cookies manually through your browser, your cookie consent preference (stored in mango_consent) will also be deleted, and the consent banner will reappear on your next visit. You will need to re-set your preferences.
Under Mexico's LFPDPPP (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), you have rights regarding personal data processed through cookies. To the extent cookies process personal data, you may request access to, correction of, or deletion of that data by contacting us at luis@mangxo.org. For analytics cookies that process data through a third-party service (such as Google Analytics), the data controller for that processing is the third party, and requests should be directed to them using the opt-out mechanisms described above.
Mango does not use cookies to make automated decisions that produce legal or similarly significant effects on you. Cookie data is used for Platform operation, security, and improvement — not for automated credit decisions. Credit underwriting decisions involve human review and are governed separately by the trade credit terms in our Terms of Service.
This Cookie Policy may be updated to reflect changes in our cookie usage, new third-party services, or changes in applicable law. When we update this policy, we will revise the "Last updated" date at the top. If we add new categories of cookies or significantly change how we use existing cookies, we will notify registered users by email and display the updated cookie consent banner to request fresh consent for the new usage.
The current version of this Cookie Policy is always accessible at mangxo.org/legal/cookies.html. Previous versions are available upon request by contacting contact@mangxo.org.
Questions about this Cookie Policy or about how Mango uses cookies on mangxo.org should be directed to:
Mango
Email: contact@mangxo.org
Privacy and data inquiries: luis@mangxo.org
Mexico City, Mexico
Website: mangxo.org
We will respond to cookie-related inquiries within 10 business days.