Privacy policy
Last updated
This is a personal portfolio. It collects as little data as possible, always for a clear purpose. Here is everything that happens to your data when you visit.
Who is responsible
André Menezes, an individual based in Rio de Janeiro, Brazil — the data controller under Brazil's LGPD (Law 13,709/2018).
Contact for any privacy matter: andre@bragademenezes.com.
Contact form
Data: your name, email and the message you write.
Purpose: replying to you. Legal basis: your consent when sending, and the legitimate interest in answering whoever wrote.
How: the message is delivered by email through the Resend service and stays in André's inbox. It is not stored in a database or used for marketing.
Retention: up to 12 months after the last exchange, or sooner if you ask for deletion.
Google Analytics (only if you accept)
If — and only if — you click "Accept" on the cookie notice, the site loads Google Tag Manager, which in turn loads Google Analytics 4. GA4 uses cookies (_ga, _ga_*) to measure in aggregate which pages and projects are viewed, where visits come from and what kind of device is used. Tag Manager is set up for Analytics only, with no advertising.
Legal basis: consent. Without it, no request is made to Google.
GA4 does not log full IP addresses. Data is kept for up to 14 months under the account settings.
You can change your mind at any time under "Cookie preferences" in the footer. Declining stops collection and deletes the Analytics cookies from this browser.
Preferences stored on your device
The site keeps the theme (day/night), sound, fairy, the gems you found and your cookie choice in your browser's local storage (localStorage).
This data never leaves your device, does not identify you and only lets the site remember your choices. You can delete it by clearing the site's data in your browser.
Hosting
The site is hosted on Vercel, which logs technical data for each request (such as IP address and browser) for a short period, for security and operation of the service.
The site also uses Vercel Web Analytics to count visits in aggregate (pages viewed, referrer, country, device type and browser). It does not use third-party cookies and does not identify you: each visit is recognized by a hash generated from the request, discarded after 24 hours. It works regardless of your choice about Google Analytics cookies.
Who data is shared with
Only the providers above, each for its own role: Vercel (hosting and visit metrics), Resend (delivering the form email) and Google (Tag Manager and Analytics, only with consent). They may process data outside Brazil under their own policies and contractual safeguards.
No data is sold or used for advertising.
Your rights
Under the LGPD (art. 18) you may request confirmation of processing, access, correction, deletion, portability, information about sharing, and withdrawal of consent.
For any request, write to andre@bragademenezes.com. You will get an answer within 15 days.
Changes to this policy
If this policy changes, the date at the top of the page changes too.