Privacy Policy

1. Who is responsible

The data controller is João Vitor Ventura, the developer of this site. For any privacy question or request, use the contact page.

2. What data is collected

• Contact form: the name, email, subject and message you send.
• IP address: when you submit the form, it is used to limit the number of messages per visitor (kept only in the server's memory, for up to 10 minutes) and passed to Cloudflare for the anti-bot check.
• Anti-bot check: Cloudflare Turnstile, loaded only on the contact page, analyzes technical browser signals to tell people from bots.
• Technical logs: the server may record errors to keep the site working. These records don't include the content of your message.
• Visit statistics: Cloudflare Web Analytics counts visits and records the page viewed, the site you came from, country, browser and device type. It doesn't use cookies, doesn't identify you and doesn't follow you across other sites.

Nothing else is collected. Browsing the pages doesn't require you to give any personal data.

3. How the data is used

Only to read and reply to your message, to protect the form against spam and abuse and to know, in general numbers, how many people visit the site and which pages they read. The data is not sold, not used for marketing, and you are not added to any mailing list.

4. Legal basis

Replying to the contact you started (LGPD, article 7, V) and the legitimate interest in keeping the site safe from abuse and in understanding, in aggregate, how it is used (article 7, IX).

5. Who the data is shared with

• Resend: delivers the form message to my inbox.
• Cloudflare: anti-bot check (Turnstile) and visit statistics (Web Analytics).
• Microsoft Azure: hosts the site's server.
• Some film posters are loaded directly from the TMDB and IMDb (Amazon) image servers, which receive your IP address like any website you visit.

These companies may process data outside Brazil, mainly in the United States, under their own privacy policies.

6. How long the data is kept

Messages stay in my inbox for as long as the conversation needs, and you can ask for them to be deleted at any time. The IP address used for the message limit is discarded within 10 minutes. Resend keeps delivery records for a limited period, under its own policy.

7. Cookies and local storage

The site doesn't use tracking or advertising cookies. It only uses:

• .AspNetCore.Culture: remembers the language you chose.
• .AspNetCore.Antiforgery: protects the contact form against submissions forged by other sites.
• theme (browser local storage): remembers the light or dark theme. It is never sent to the server.

They are strictly necessary for features you use, so there is no consent banner. You can delete them at any time in your browser settings.

8. Your rights

Under the LGPD, you can ask for confirmation that I hold data about you, access to it, correction, deletion, and information about who it was shared with. Send your request through the contact page, and I will reply within 15 days. You can also file a complaint with Brazil's National Data Protection Authority (ANPD).

9. Children

The site is not directed at children, and the contact form shouldn't be used by anyone under 18 without a parent's or guardian's permission.

10. Changes to this policy

If this policy changes, the date at the top of the page will be updated.