Privacy Policy

Summary of key points

• What we collect: what you choose to send through the contact form, and anonymous, aggregated measurements of how the site is used.
• Why: to answer you, and to keep the site fast, useful and protected from abuse.
• Who handles it: Zirtuno, and the few providers that deliver our email, measure traffic, host the site and serve its code. Nobody buys it.
• Cookies: one, to remember your language. The Cookie Policy has the detail.
• Your rights: you can ask to see, correct or delete your information at any time.

Information we collect

Information you give us

When you write through the contact form, we receive:

• Your name and email address
• Your company, if you add it
• Your message
• The kind of conversation you chose (a project, advisory, another subject or an application) and any optional details you add, such as a budget range, a timeline, your role or a link to your work
• The call to action you arrived from, so we can answer in context

Information collected automatically

We use Plausible Analytics to count, in aggregate:

• Pages viewed, and the site that referred you
• Browser, operating system and device type
• Country, derived from your IP address, which is not stored
• Anonymous page-performance measurements (Core Web Vitals)
• Clicks on calls to action and contact links, tagged with where on the site they sit

None of this is tied to your name, your email address, or an identifier that follows you from one day to the next or from one site to another.

Technical data

Like any website, the servers that deliver this one receive your IP address and browser details with each request. The contact form's endpoint also counts how many messages arrive from each IP address, over one-minute and ten-minute windows, to stop floods of submissions. Those counts live only in memory, on the server and in our hosting provider's request limiter, expire with their window, and are never written to our storage. Our delivery logs record events, not who sent them.

Cookies and device storage

The site sets one functional cookie, to remember your language, and keeps two small values in your browser's session storage. None of them is used to identify or track you. The Cookie Policy describes each one.

How we use your information

We use it to:

• Reply to your enquiry or application
• Prepare a proposal, when you ask for one
• Understand, in aggregate, which pages and paths people find useful
• Find and fix slow or broken pages
• Protect the contact form from spam and abuse
• Meet our legal obligations

We do not sell your information, use it for advertising, or add you to a mailing list you did not ask to join.

Legal bases for processing

Under the LGPD, we process personal information on the following bases:

• Steps you asked us to take: answering an enquiry or application you sent us, and preparing a proposal (art. 7, V).
• Legitimate interest: aggregated analytics, performance measurement and protecting the site from abuse, in ways you would reasonably expect (art. 7, IX).
• Legal obligation: keeping the records the law requires us to keep (art. 7, II).
• Consent: if we ever need your information for a purpose not listed here, we will ask first, and you can withdraw that consent at any time (art. 7, I).

Sharing your information

We share personal information only with the providers that run parts of the site for us, and only for the purposes above:

• Email delivery: Resend delivers contact-form messages to our inbox and reports whether they arrived.
• Analytics: Plausible Analytics receives the aggregated measurements described above.
• Hosting: the infrastructure provider that serves the site processes request data to deliver its pages.
• Code delivery: the runtime behind some of the site's animations is downloaded from public code CDNs (unpkg, with jsDelivr as a fallback), which receive your IP address and browser details, as any server does.
• Legal requirements: we disclose information when the law, or a valid order from a competent authority, requires it.

Some of these providers operate outside Brazil, so your information may be processed abroad. We never sell it, or share it for anyone else's marketing.

Retention

• Contact messages: kept while the conversation is active, and afterwards only for as long as we need them for our records.
• Applications: kept while a fit remains possible. Ask, and we delete yours.
• Rate-limiting counts: held only in memory, for the one or ten minutes of their window, and never written to our storage.
• Analytics: aggregated, with no personal information to retain.

Security of your information

The site is served over encrypted HTTPS connections. The contact endpoint limits the size and frequency of submissions, accepts delivery reports only when they carry a verified signature, and keeps no database of messages. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take reasonable measures to protect what you send.

Your privacy rights

Under article 18 of the LGPD, you may ask us for:

• Confirmation and access: whether we hold personal information about you, and a copy of it.
• Correction: of information that is incomplete, inaccurate or out of date.
• Anonymisation, blocking or deletion: of information that is unnecessary, excessive or processed unlawfully.
• Portability: of your information to another provider, under the rules of Brazil's data protection authority.
• Deletion: of information processed on the basis of your consent.
• Information about sharing: which organisations we have shared your information with.
• Withdrawal of consent: at any time, wherever processing relies on it.

To exercise any of these rights, write to us through the contact form. You may also petition Brazil's National Data Protection Authority (ANPD).

Children's privacy

This site is not directed at children or adolescents, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has sent us personal information, tell us through the contact form and we will delete it.

Changes to this policy

We may update this policy as the site or the law changes. Every revision is published on this page with a new date at the top, and we encourage you to review it from time to time.

Contact us

Questions, comments or requests about this policy reach us through the contact form.

Zirtuno · Curitiba, Paraná, Brazil