Privacy Policy

1. Who we are

This website (leandrofurtado.com.br) is the professional portfolio of Leandro Furtado, Senior Art Director, Curitiba, Brazil, CNPJ (Brazilian company registry) 59.375.755/0001-13. Data controller: Leandro Furtado, contact: contatoleandrofurtado@gmail.com.

2. Data we collect

Contact form: name, email and message, provided voluntarily and used solely to reply to you.

Technical data: the server keeps basic access logs (IP address, date/time, page) for security and diagnostics, retained for a limited period.

Preferences: your theme choice and this notice acknowledgement are stored only in your browser (localStorage), they never reach our servers.

We do not collect sensitive data, do not sell data and do not use behavioural advertising.

3. Cookies

Essential: a session cookie is used only in the restricted admin area. Public visitors receive no tracking cookies by default.

Analytics (optional): if audience analytics tools are enabled they may set their own cookies; see the tool's policy referenced on this page.

Third parties: embedded content (Instagram, YouTube, Vimeo) may set its own cookies when loaded, under those platforms' policies.

Language: choosing PT or EN stores that preference in a cookie (lf_lang) so the site opens in your language on later visits.

3.1. Approximate location from IP

The site shows the approximate city you are browsing from and, on a first visit from outside Brazil, opens in English. To do this your connection's IP address is matched against a public database (DB-IP Lite, CC BY 4.0) installed on this server.

Your IP is never sent to any external service and is never stored. It is used at request time, turned into an approximate city and country, and discarded. No profile is built, there is no tracking across visits, and the result is approximate — it usually points to your internet provider's region, not to your address.

Legal basis: legitimate interest (LGPD art. 7(IX); GDPR art. 6(1)(f)), limited to presenting the site in the right language.

3.2. Audience analytics (with your permission)

Only run once you click "Accept analytics" on the cookie notice. Declining does not block anything on the site.

Google Tag Manager (GTM): organizes the tools below — it is the only script the site loads; no analytics code comes directly from here.

Google Analytics 4: pages visited, time on site and traffic source, aggregated.

Meta Pixel (Facebook/Instagram): ad interactions and pages visited, to measure campaign return.

To revoke at any time: change my choice — deletes the stored choice and reopens the cookie notice.

4. Legal basis (LGPD & GDPR)

We process data based on consent (contact form), legitimate interest (site security and operation) and legal obligation where applicable, under Brazil's LGPD (Law 13,709/2018) and the EU GDPR.

5. Your rights

You may request at any time: confirmation of processing, access, rectification, anonymisation, portability, erasure and consent withdrawal. Write to contatoleandrofurtado@gmail.com; we reply within 15 days. EU residents may also contact their local supervisory authority (GDPR arts. 15–22); Brazilian residents may petition the ANPD.

6. Retention & security

Contact messages are kept only as long as needed. The site uses HTTPS, security headers, access control and a server firewall.

7. International transfers

The site is self-hosted; embedded third-party content may process data outside Brazil/EU under the respective platforms' policies.

8. Changes

This policy may be updated; the date above indicates the current version.