Privacy Policy

Data we process

Depending on how you use the site, we may process the following:

Technical and navigation data

When you visit, our hosting provider records standard request data — including your IP address and browser user-agent — in server logs, used to operate and secure the site. To count unique visitors we derive a daily-rotating, one-way hash from your IP and user-agent; your raw IP is never stored in our analytics.

Audience measurement

We record anonymous, aggregate statistics — page views, performance metrics, and engagement — to understand and improve the site. This measurement uses no cookies, keeps no raw IP or cross-site identifier, and does not build a profile of you.

Interactive map

The “currently based in” map loads map tiles from CARTO (basemaps.cartocdn.com). Requesting those tiles transmits your IP address to CARTO so it can serve the images. We send it no other data, and the map is otherwise first-party.

Account data

If you sign in with Google, we process your email address and basic profile through our authentication provider to identify you and keep your session secure.

Contact and booking

If you use a contact or booking form, we process the name, email, and details you submit so we can respond. Those forms are protected against abuse by Cloudflare Turnstile and are delivered to us by email.

Cookies and local storage

We use only strictly necessary cookies plus storage for your own preferences. We set no advertising or marketing cookies — which is why you see no consent banner.

Session cookie (sb-…)

Set only if you sign in; it keeps you authenticated. Strictly necessary.

NEXT_LOCALE

Remembers the language you choose. Set only when you switch languages.

Local storage

Your theme choice, the click-counter tally, and the music-game progress live in your browser’s local storage. They stay on your device, are first-party, and are used for no tracking.

Who we share data with

We do not sell your data. We rely on a small set of service providers (processors) to run the site:

Vercel

Hosting and content delivery.

Supabase

Database, authentication, and file storage.

Resend

Sending the emails generated by the contact and booking forms.

Cloudflare

Turnstile anti-abuse protection on public forms.

CARTO

Map tiles for the interactive map.

International transfers

Some of these providers process data on servers outside your country, including outside Brazil and the rest of Latin America. Where that happens, the transfer relies on the safeguards each provider offers under applicable data-protection law.

How long we keep data

• Server logs and audience-measurement data are pruned automatically after approximately six months (180 days).
• Messages from a contact or booking form are kept only as long as needed to handle your request and any follow-up.
• Account data is kept until you delete your account.

Your rights

Under Brazil’s LGPD and comparable Latin American data-protection laws, you may request to:

• confirm whether we process your data and access it;
• correct incomplete or outdated data;
• have your data deleted or anonymized;
• receive your data in a portable form;
• know with whom we share it; and
• object to processing based on legitimate interest.

Children

The site is not directed to children and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy; the “last updated” date above reflects the current version. Material changes will be reflected here.

Contact

To exercise your rights, ask a question, or lodge a complaint about how your data is handled, contact the controller. You also have the right to complain to your data-protection authority (in Brazil, the ANPD).

Email: contacto@ivamaro.me