Privacy and cookies

What the site stores

For the newsletter, I store your email and the language of the page where you signed up. Right now the list only collects emails; when I start sending updates, they will go to those addresses.

For comments, I store your name, your email, the text you wrote, the language of the page, and a scrambled code of your internet address (IP) that can’t be turned back into the IP. I use that code only to limit how many comments the same address can send in 10 minutes. Your email never appears on the site: only I can see it. Your name and text become public after I approve the comment.

For recommended links, when you tap “View in store” I record which link it was, when, and which page of the site you came from. I don’t store anything that identifies you.

Cookies

The site doesn’t use analytics, advertising or tracking cookies. There’s no Google Analytics, no social network pixel and no ads.

The site’s language comes from the page address (English starts with /en), not from a cookie.

Only I log in to the admin panel, and that login uses a session cookie stored only in my own browser.

That’s why the cookie notice on screen is informational only: there is no optional cookie for you to accept or refuse. When you tap “Got it”, your browser stores only a local mark saying the notice has already been seen, so it doesn’t show up again. That mark stays in your browser only, is never sent to the server and doesn’t identify anyone.

Who else receives your data

On an article page, the comment box uses Cloudflare Turnstile to tell people from bots. When you open the article, your browser loads that service, and Cloudflare receives your internet address (IP) and browser data, only for that check. Read the Turnstile privacy policy.

The site is hosted on Vercel and the data is kept on Supabase. These are cloud services, with servers that may be outside Brazil, and they keep technical access logs.

When someone comments, the alert reaches me by email, sent through Resend. The comment text passes through it.

The WhatsApp, Instagram, TikTok and YouTube buttons take you to other services. From the moment you tap, their own policies apply.

I don’t sell or give your data to anyone.

How long I keep it

I keep the data for as long as the site exists or until you ask me to delete it. There’s no automatic cleanup yet: when someone asks, I delete it by hand.

Your rights and how to reach me

Under the LGPD (Brazil’s General Data Protection Law, law 13.709/2018), you can ask what data of yours I hold, have it corrected or deleted, and withdraw a consent you gave, such as leaving the newsletter.

Write to contato@ponteirourbano.com.br saying which email, name or comment it is about, and I’ll answer as soon as I can.

If this changes

If the site starts storing something new, I’ll update this page and the date at the top.