Privacy and data protection

Privacy Policy

This policy explains, in plain language, what information is processed when you visit lucasbrasso.dev, why it is used, and the choices you have.

Effective date:

1. Who is responsible for your data

Lucas Brasso de Morais is the controller of personal data processed through lucasbrasso.dev. Questions or requests about privacy can be sent to [email protected].

2. What data is used and why

When you open the site, the hosting service may process basic technical information such as your IP address, browser or device type, requested pages, and access time. This is needed to deliver the site, keep it secure, prevent abuse, and solve technical problems. The legal basis is the legitimate interest in operating a safe and reliable website.

Optional analytics data is used only with your consent to understand how the site is used and improve its content and experience. Personal data is not sold, and the site does not use automated decisions that produce legal or similarly significant effects for you.

3. Cookies and Google Analytics

Google Analytics is optional and remains blocked until you select Accept. If you accept, Google may process online identifiers and general information about your browser, device, approximate location, visited pages, and interactions. The site uses this information to understand overall usage and improve the path to contact.

Analytics does not receive your diagnostic answers or the information you enter in WhatsApp, Instagram, or email. A necessary preference remembers your choice for six months. Analytics data associated with users and events is configured to be retained for two months. You can refuse or withdraw consent at any time through Cookie preferences in the footer.

4. Diagnostic and contact

Your diagnostic answers stay in your browser while you complete the experience. When you choose WhatsApp, Instagram, or email, the site prepares a message and opens that service. Nothing is sent through the selected service unless you decide to continue there.

If you send a message, the information you provide is used to answer your request, prepare a proposal, or take steps toward a possible contract. Providing this information is voluntary, but without it the request cannot be answered. The legal basis is taking steps at your request before a contract or the legitimate interest in replying to your inquiry. The selected external service also applies its own privacy policy.

5. Providers, international transfers, and retention

Vercel provides hosting and website delivery, while Google provides optional analytics. WhatsApp and Instagram are Meta services, and email is handled by the providers used by each party. These companies may use authorized service providers to operate and protect their services.

Some processing may take place outside the European Economic Area, including in the United States. Where required, the providers state that they rely on recognized safeguards such as adequacy decisions or the European Commission’s Standard Contractual Clauses.

Analytics data is retained as described above. Technical hosting records and messages are kept only for the periods needed to provide and secure the relevant service, respond to the conversation, comply with legal duties, or establish and defend legal claims.

Provider privacy information: Google Privacy Policy · Vercel Privacy Notice

6. Your privacy rights

Depending on the circumstances, you may ask for access to your personal data, correction, deletion, restriction, objection, or portability. You may also withdraw consent at any time without affecting processing that was lawful before withdrawal.

Send requests to [email protected]. You also have the right to lodge a complaint with the data protection authority where you live or work, or where you believe a GDPR infringement occurred. Identity may be verified when necessary to protect your data.

Find your supervisory authority: EDPB list of data protection authorities

7. Contact and policy updates

For privacy questions, contact [email protected]. This policy may be updated if the site, its providers, or legal requirements change. The effective date shown above will identify the latest version.

Manage analytics consent

You can accept or reject optional analytics at any time.