Privacy Policy
This Policy transparently describes which personal data this site processes, for what purpose, for how long, and what your rights as a data subject are, in accordance with Brazilian Law No. 13.709/2018 (LGPD).
1. Data controller
The cardosofiles.com.br website is a professional portfolio maintained by João Batista Cardoso ("Cardoso Files"), an independent developer based in Uberlândia — MG, Brazil.
For any matter regarding this Policy or the processing of your personal data, the controller and data protection contact is the e-mail contato@cardosofiles.com.br.
2. Data we collect
We collect only the minimum needed to operate the site and reply to your messages (data minimization — art. 6, III of the LGPD):
- Contact form data: first name, last name, e-mail, phone (optional) and the content of the message you write.
- IP address: temporarily recorded when the form is submitted, solely to limit abusive submissions (rate-limiting) and protect the service against spam.
- Anonymized usage data: aggregated performance and audience metrics collected by Vercel Analytics and Vercel Speed Insights, with no personal identification and no tracking cookies.
3. Cookies and local storage
This site does not use advertising or tracking cookies and does not share your behavior with ad networks. We only use the browser local storage (localStorage) to remember essential functional preferences:
- theme — stores your theme preference (light, dark or system), managed by the next-themes library. Without this key the site could not keep the theme you chose across visits.
- welcome_banner_closed_at — records when you closed the welcome banner, so it is not shown again on every navigation.
- legal_consent_v1 — stores your decision about this privacy and terms notice, so it does not appear again.
4. Purpose and legal basis
Each processing activity has a specific purpose and a legal basis defined by the LGPD (arts. 7 and 6):
- Replying to your contact: form data is used only to read and reply to your message and to send a confirmation e-mail. Legal basis: the data subject’s consent (art. 7, I), given when you accept the Terms and submit the form.
- Security and fraud prevention: the IP address and anti-spam mechanisms (honeypot and rate-limit) protect the service. Legal basis: the controller’s legitimate interest (art. 7, IX) and security (art. 6, VII).
- Site functionality: preferences saved in localStorage ensure the basic experience. Legal basis: necessity for the provision of the requested service.
5. Sharing and processors
We do not sell or trade your data. To operate, we rely on service providers (processors under art. 6) that handle data strictly under our instructions:
- Resend (resend.com): transactional e-mail delivery service. It receives the form data to deliver your message to the owner and to send you the confirmation e-mail.
- Vercel (vercel.com): hosting of the website and collection of anonymized performance and audience metrics.
6. Retention and deletion
Messages sent through the form remain in the controller’s mailbox (contato@cardosofiles.com.br) for as long as needed to handle your request and keep the relationship history, and may be deleted upon request.
The IP address used for submission control is kept only during the rate-limit window (a few minutes) and then discarded. The localStorage keys remain until you clear them in your browser.
7. Your rights as a data subject
Under art. 18 of the LGPD, you may, at any time and free of charge, request:
- confirmation that processing exists and access to your data;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary data or data processed unlawfully;
- portability and information about the parties with whom the data has been shared;
- deletion of data processed based on consent;
- withdrawal of consent, at any time.
8. Information security
We adopt technical measures to protect your data (art. 6, VII and art. 46): HTTPS-encrypted traffic, per-IP request limiting, a honeypot field against bots, and the use of reputable providers for e-mail delivery and hosting. Even so, no system is entirely immune, and you should also safeguard the information you share.
9. Audience and minors
This site is intended for a professional audience and is not directed at children or adolescents. We do not knowingly collect data from minors.
10. Changes to this Policy
This Policy may be updated to reflect changes to the site or the law. The "Last updated" date at the top indicates the current version. We recommend reviewing it periodically.
11. Contact and ANPD
Questions, requests or complaints about privacy may be sent to contato@cardosofiles.com.br. You also have the right to petition the Brazilian National Data Protection Authority (ANPD).