Privacy policy
Who is responsible for your data
Ricardo Ribeiro, an independent web developer based in São José do Rio Preto, Brazil ("I", "me"). For anything related to this policy, email rsribeiroit@gmail.com.
What this site collects
This is a personal portfolio. There is no account, no newsletter and no contact form that stores data in a database. Two things happen:
- Analytics (only with your consent). Google Analytics 4 tells me which pages are read, roughly where visitors are (city level), which browser, device and referring link they arrived from, and how long they stayed. Google processes this as my processor under the Google Ads Data Processing Terms. IP addresses are truncated before storage and are never used to identify you.
- Strictly necessary security and preference data. The CDN that delivers the site (Cloudflare) sets a short-lived bot-management cookie, and the language toggle remembers your choice in a cookie and in local storage on your device. These do not identify you.
Legal basis
Analytics runs on your consent (Article 6(1)(a) GDPR). If you reject, Google Analytics stays in consent-denied mode: no analytics cookies are written, no identifiers are stored, and any measurement ping is cookieless and aggregated. Security and preference data rely on my legitimate interest in keeping the site available and remembering your language choice (Article 6(1)(f)).
How long it is kept
- Analytics cookies: up to 13 months after your last visit.
- Analytics event data in Google Analytics: 14 months (Google's default retention), then deleted.
- Bot-management cookie: 30 minutes.
- Language preference: 12 months, and you can clear it at any time in your browser.
Who else sees it
- Google Ireland Ltd. / Google LLC - analytics (processor), only if you consent.
- Cloudflare, Inc. - CDN and bot protection (processor).
- HostGator / Newfold Digital - hosting of the site and its server logs (processor).
I don't sell data or run advertising, and I don't build profiles. Some of these providers are based outside the EU/EEA; transfers rely on the European Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework where applicable.
Server logs
The web server keeps short-lived access logs (IP address, requested URL, user agent) to keep the site secure and working. These logs are rotated by the hosting provider and are not used for marketing.
Your rights
You can ask for a copy of your data, correct it, delete it, restrict or object to its processing, and ask for it in a portable format. You also have the right to withdraw consent at any time and to complain to the Portuguese supervisory authority, CNPD. Write to rsribeiroit@gmail.com and I will answer within 30 days.
Withdrawing or changing your consent
Use the button below to erase the choice saved in this browser and see the banner again. You can also block or delete cookies in your browser settings, and browse the site in private mode - everything keeps working.
Changes to this policy
If the way the site handles data changes, this page is updated and the date at the top changes with it.
Cookie policy · Home · Blog