Courtesy translation. This site is operated from Brazil and this policy follows Brazilian data protection law. In case of any discrepancy between this text and the original, the Portuguese version prevails.
This policy explains which personal data this site collects, why it collects them and what you can do about it. It follows Brazil's General Data Protection Law (Lei nº 13.709/2018, "LGPD").
1. Who is responsible for your data
The party responsible for processing the data (the "controller", in LGPD terms) is Luiz Eduardo, an individual, who maintains this site.
For anything related to personal data — a question, a request or a complaint — the contact is contato@maiastudios.com.br.
2. What data is collected
Data you send
There are two places on this site where you type something. In the contact form, you send your name, email, subject (optional) and message. That data is emailed straight to the maintainer's inbox and is not stored on the site.
In the newsletter signup form, at the end of every blog article, you send your email and tick the consent box. That one is stored: the address is written to a file on the server, along with the signup date, the page language and the article where it happened — nothing else, and never what you browsed. This site has no database; it is a text file, reachable only by the maintainer.
The subscription is only activated after you click the confirmation link sent to that address. Until then nothing is sent; if someone else typed your email, simply ignore the message. The date of that confirmation is stored as well — it is the proof that consent was given, as the LGPD requires. Every newsletter email carries an unsubscribe link, and clicking it deletes your address from the file right away.
Data collected automatically
As on any website, the server hosting these pages records technical access information: IP address, date and time, page visited and browser used. These logs exist because Brazil's Internet Civil Framework (Lei nº 12.965/2014) requires them, and to keep the site secure and running.
3. Why the data is used
- To answer you. The form data is used for that and nothing else.
- To announce new articles. The newsletter email is used for that and nothing else.
- To keep the site up and secure. Technical logs help spot errors and abuse.
- To comply with the law. Keeping access logs is a legal obligation.
Your data is never sold, rented or handed over to third parties for commercial purposes. Using the contact form does not sign you up for any mailing list: the newsletter only takes those who ask for it, by ticking the consent box in its own form.
4. On what legal basis
The LGPD requires a justification for each kind of processing. Here they are:
- Contact form: preliminary steps taken at the data subject's request (art. 7, V).
- Newsletter: consent (art. 7, I) — given by ticking the box in the form, and revocable at any time.
- Access logs: compliance with a legal obligation (art. 7, II).
- Non-essential cookies: consent (art. 7, I) — requested through the banner, and revocable at any time.
5. Cookies
Cookies are small files a site stores in your browser. This site uses as few of them as possible.
Necessary cookies (always on)
A single session cookie, created by Flask, which does two things: it shows the confirmation or error message after you submit the form, and it limits how many messages can be sent in a row, to curb spam. It does not identify you, does not follow your browsing and disappears when you close the browser. Cookies of this kind are indispensable for the site to work and therefore do not require consent — but you are entitled to know they exist, which is what this section is for.
Your choice in the cookie banner is kept in the browser's own local storage, not in a cookie — that is what stops the site from asking the same thing on every visit.
Analytics and advertising cookies
This site currently uses no analytics or advertising cookies whatsoever. There is no Google Analytics, there are no ads, there is no social network pixel and there is no cross-site tracking.
If that changes, such tools will only load after your consent through the banner, this policy will be updated with the date of the change, and you will still be able to refuse without losing access to any content.
You can review or change your choice whenever you want: . You can also block or delete cookies directly in your browser settings.
6. Who else has access
A few third-party services take part in running the site and may therefore process data:
- Hosting provider. Keeps the site online and generates the access logs.
- Email provider (SMTP). Carries messages from the contact form to the maintainer's inbox.
- Google Fonts. The fonts used in the site's design are loaded from Google's servers, which receive your IP address as part of that request. No cookie is created by it.
- Newsletter. The signup at the end of the articles does not go through any third-party service: the form belongs to this site and your email is written to a file on the server that hosts it, together with the signup date, the page language and the article where it happened. Nothing is sent to marketing platforms, and the address is neither shared nor sold.
7. How long the data is kept
- Form messages: stay in the maintainer's mailbox for as long as they are useful to the matter at hand, and are deleted afterwards.
- Newsletter signup: the email is kept for as long as you want the updates. The unsubscribe link, present in every message sent, deletes the whole row from the file right away — nothing is kept for history. You may also request deletion through the address in section 8.
- Access logs: kept for the legal period of 6 months (art. 15 of the Internet Civil Framework).
- Your cookie choice: stays in your browser until you clear it or change the choice.
8. Your rights
Article 18 of the LGPD gives you the right to request, at any time:
- confirmation that your data is being processed;
- access to the data held about you;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary or excessive data;
- portability of the data to another provider;
- deletion of data processed on the basis of your consent;
- information about who the data has been shared with;
- withdrawal of consent.
To exercise any of them, just write to contato@maiastudios.com.br. Requests are answered as quickly as possible. You may also file a complaint with the Brazilian National Data Protection Authority (ANPD).
9. Security
The site is served over an encrypted connection (HTTPS) and the email credentials live in environment variables on the server, outside the code. No system is completely immune, but the risk here is reduced by the fact that the site stores no personal data: it only carries it through to an email.
10. Children and teenagers
This site is not directed at people under 18 and does not knowingly collect data from that age group. If you are responsible for a minor and believe they submitted data through the form, write to the address above and the message will be deleted.
11. Changes to this policy
If this policy changes, the update date at the top of the page changes with it. Material changes — such as starting to use advertising or analytics tools — will come with a fresh request for consent through the banner.