Privacy policy

Controller

The data controller is Gustavo Antônio Cimarosti Garcia, based in Porto Alegre, RS, Brazil. For privacy requests, email gustavogarciaci1@gmail.com or use the contact form.

What we collect

By default, PostHog runs in cookieless mode: page views, page leaves, and product events (for example contact-form submissions, project clicks, and article reading progress) without storing cookies or local identifiers in your browser. Identity is handled with a privacy-preserving server-side hash.

If you accept optional experience cookies, PostHog may also store cookies/local storage, record masked session replays, and capture heatmaps. Google Analytics may load after the same acceptance. Form fields are masked in replays; message content and contact details are never sent as analytics properties.

The contact form processes your name, email, and message solely to reply to you (via Resend). That is separate from analytics.

Legal bases (LGPD)

Cookieless, anonymous analytics: legitimate interest in understanding how the portfolio is used so it can be improved, balanced against your privacy (Art. 7, IX LGPD).

Session replay, heatmaps, analytics cookies, and Google Analytics: consent (Art. 7, I LGPD). You can accept or decline in the banner and change your choice later via “Manage cookies” in the footer.

Contact messages: performance of pre-contractual steps / legitimate interest in responding to your inquiry (Arts. 7, V and IX), limited to communication with you.

Cookies and similar technologies

Essential: NEXT_LOCALE stores your language preference for one year (SameSite=Lax). It is necessary for the service you requested and is not used for advertising.

Optional (only after you accept): PostHog cookies/local storage for session continuity, session replay, and heatmaps; Google Analytics cookies if that tag is configured.

Vercel Analytics and Speed Insights may collect aggregated performance and usage metrics on the hosting platform. They are documented here for transparency.

International transfers

PostHog Cloud (US) and, when enabled, Google Analytics process data on servers outside Brazil. Providers apply contractual and technical safeguards. By accepting optional cookies you acknowledge this transfer for those tools.

Retention

Analytics events are retained according to the PostHog (and Google Analytics, if enabled) project settings — typically months to a few years for aggregated product insight. Contact emails are kept only as long as needed to handle your request and any legal obligations.

Your rights

Under Brazil’s LGPD you may request confirmation of processing, access, correction, anonymization, blocking, deletion of unnecessary data, information about sharing, and revocation of consent. To exercise these rights, email gustavogarciaci1@gmail.com. You may also lodge a complaint with the ANPD.

To stop optional cookies and replay immediately, use “Manage cookies” in the footer and decline, or clear site data in your browser.

Changes

This policy may be updated when analytics tools or legal requirements change. The “Last updated” date at the top reflects the latest revision.