Privacy
Privacy and Cookie Policy
This document describes, in verifiable terms, what data this site collects, what for, who it is shared with, and what you can demand about it.
Last updated: July 2026
The essentials
- We keep no database. This site stores nothing of yours on any server of ours.
- There is no sign-up, no login, no profile and no browsing history attributed to you.
- The contact form only collects when you click send, and the result is an email — not a record in a database.
- No tracker or third-party content loads before you accept. Declining has a real effect.
Data collected and purposes
What you tell us
Only through the contact form, and only at the moment you click send. Nothing typed before that is captured: nothing is saved automatically, nothing is sent on each keystroke, and there is no measurement of how you fill it in.
| Field | Required | What for |
|---|---|---|
| Name | Yes | To know who we are replying to. |
| Yes | Reply address for your enquiry. | |
| Company | Yes | To understand the context of the request. |
| Message | Yes | The content of what you want to discuss. |
| Phone | No | Alternative channel, if you prefer. |
| Service of interest | No | To route your enquiry to whoever answers it best. |
What third parties collect automatically
Only after you accept. This data does not pass through us: it goes straight from your browser to the third party, which is the one collecting it.
- IP address and User-Agent, received by Google Analytics, Elfsight and Google Maps when they load.
- Pages viewed and clicks on call-to-action buttons, measured by Google Analytics to understand how the site is used.
Storage and retention
We have no database.
This site has no database, no sign-up and no logged-in area. There is no record of you on any server under our control — there is nothing to query, export or leak from a database that does not exist.
Form data exists in a single form: the email delivered to Autis Analytics. It passes through Resend, an email delivery service based in the United States, and sits in the recipient inbox — like any email you would send directly. It is not written to a database of ours, nor used to track your browsing.
What stays in your browser is only your cookie choice and your theme preference, both detailed in the cookies section. Neither identifies you.
The retention period for received emails is yet to be defined and published — it is one of the sections still being drafted.
Sharing and international transfer
We do not sell, rent or hand over data to anyone. The third parties below are the only ones that receive anything, each with a specific role. None of them is triggered before you accept.
| Third party | Role | Country | Data it receives | When it is triggered |
|---|---|---|---|---|
| Google Analytics 4 | Audience measurement | United States | IP address, User-Agent, pages viewed and clicks on call-to-action buttons | Only after you accept. Without acceptance, gtag.js is not loaded and no request reaches Google. |
| Elfsight | Widget that renders the LinkedIn feed | Cyprus | IP address and User-Agent, plus whatever storage Elfsight itself defines | After you accept, or when you click "Load content" in place of the feed. It also depends on you scrolling down to that section. |
| Google Maps | Address map on the contact page | United States | IP address and User-Agent | After you accept, or when you click "Load content" in place of the map. |
| Resend | Service that delivers the email generated by the form | United States | The fields you filled in on the form | Only when the form is submitted. Nothing you type before clicking send is captured. |
Three of these processors are outside Brazil, which constitutes an international transfer. The applicable safeguards are among the sections still being drafted.
Cookies and browser storage
The table is generated from the inventory declared in the code. Strictly necessary items work without acceptance; the rest only exist after you authorise them.
Strictly necessary— no consent required
They work without acceptance because the site cannot operate correctly without them. They do not measure audience and are not shared with third parties.
| Name | Controller | Mechanism | Duration | Purpose |
|---|---|---|---|---|
autis_consent | Autis Analytics (first party) | Cookie | 6 months | Stores your choice about analytics cookies and third-party content. Without it there is no way to honour a refusal between visits. |
theme | Autis Analytics (first party) | localStorage | Until cleared in the browser | Theme preference (light, dark or system). It does not identify the visitor and never leaves the browser. |
Analytics— requires consent
Only written after you accept. Without acceptance, the Google Analytics script is not loaded — it is not just the cookie that ceases to exist, the file is never downloaded.
| Name | Controller | Mechanism | Duration | Purpose |
|---|---|---|---|---|
_ga | Google Analytics 4 | Third-party cookie | 2 years | Distinguishes visitors to count sessions and page views. |
_ga_<property-ID> | Google Analytics 4 | Third-party cookie | 2 years | Keeps session state within the GA4 property. |
Embedded third-party content— requires consent
The LinkedIn feed and the address map come from third-party servers. They load after you accept, or when you click "Load content" in the space reserved for them. What each one writes is defined by the third party itself and is outside our control.
| Name | Controller | Mechanism | Duration | Purpose |
|---|---|---|---|---|
Storage defined by Elfsight | Elfsight | Third-party script and storage | Defined by Elfsight | Renders the LinkedIn feed. On load, Elfsight receives your IP and User-Agent. |
Google cookies (e.g. NID) | Google Maps | Third-party cookie | Defined by Google | Displays the address map. On load, Google receives your IP and User-Agent. |
Your choices
On your first visit, the cookie bar offers accept or decline, with the same visual weight. Declining is not merely dismissing the notice: the Google Analytics script is not loaded, third-party embeds are not triggered, and any cookies Analytics had written are deleted.
Your choice is kept in the autis_consent cookie for 6 months and honoured on subsequent visits. After that period, the question is asked again.
Even after declining, you can load the map or the LinkedIn feed on a one-off basis by clicking "Load content" in the space reserved for them — that click applies to the current visit only and stores nothing.
You can also manage or delete cookies in your browser settings, which applies to any website.
To change your decision at any time: .
Your rights
Article 18 of the LGPD guarantees the rights below over your personal data. Some have limited reach here simply because we keep no database — but you may exercise any of them.
Confirmation and access
To know whether we process your data and what it is.
Correction
To correct incomplete, inaccurate or outdated data.
Anonymisation, blocking or deletion
Of unnecessary or excessive data, or data processed unlawfully.
Portability
To receive your data in a format that lets you take it to another provider.
Deletion
To erase data processed on the basis of your consent.
Information about sharing
To know which public and private entities your data was shared with — the section above already lists them all.
Information about not consenting
To know that you may refuse, and what the consequences of refusing are.
Withdrawal of consent
To change your mind at any time, through the preferences control on this page or in the footer.
How to exercise them
Write to the address below describing what you want. We may ask for additional information to confirm the request is yours — that is protection against someone requesting your data while posing as you.
Security
What can be stated about how data is protected on this site:
- All traffic is served over HTTPS.
- There is no database, sign-up or logged-in area — there is no store that could be exposed.
- Email delivery credentials exist only on the server and never reach the browser.
- No third-party script is downloaded before you accept, so nothing is handed to them without authorisation.
No measure removes risk entirely. Should a security incident occur with relevant risk to data subjects, notification to the ANPD and to the affected individuals will follow article 48 of the LGPD.
Changes to this policy
This page is updated whenever the behaviour of the site changes — a new third party, new data, a new purpose. The last updated date is at the top. If a change alters the scope of what you accepted, the cookie bar reappears so you can decide again.
Sections being drafted
The sections below depend on formal decisions by Autis Analytics and are still being drafted. Until they are published, to exercise any right over your personal data or to ask about this document, write to contato@autisanalytics.com.
Controller identification
Being drafted.
Data Protection Officer (DPO)
Being drafted.
Legal basis for each purpose
Being drafted.
Retention period for form data
Being drafted.
International transfer safeguards
Being drafted.
Limitation of liability
Being drafted.
