Privacy Policy

This Privacy Policy explains what personal data is processed when you visit mikeias.com, why it is processed, for how long, and what rights you have. It applies to every page of the site, including the Brazilian Portuguese translation under /pt/ and the RSS feeds. The summary above lists the key facts and the contact for privacy requests.

1. Who is responsible

mikeias.com is the personal blog of Felipe Mikeias, who acts as the data controller — the person who decides how and why personal data related to this site is processed. Requests about this policy or about your data can be sent to the privacy contact shown in the summary at the top of this page.

The site is operated by an individual for publishing articles. It does not sell products or services and does not run advertising.

2. The short version

• The site has no cookies, analytics, advertising, tracking pixels, user accounts, comments, newsletters or forms.
• The only resource loaded from another company is Google Tag Manager, a Google script used to verify the site in Google Search Console and to manage site tags. It currently runs no tags that measure visitors and sets no cookies. Every other file comes from mikeias.com.
• Like any website, the hosting provider receives technical data (such as your IP address) when it delivers a page, and may keep it in server logs for security and operations.
• If you send a message, it is used only to reply to you.
• Personal data is never sold or shared for advertising.

3. What data is processed

3.1 Server logs

When your browser requests a page, the server that delivers mikeias.com automatically receives technical information that is part of any connection on the web. Depending on the hosting provider, this can include:

• your IP address;
• the date and time of the request;
• the page or file requested and the response status;
• the referring page, if your browser sends it;
• your browser’s user agent (browser, version and operating system).

Purpose: delivering the site, keeping it secure and available, preventing abuse and diagnosing errors.

Legal basis: legitimate interests in operating a secure website — Article 7, IX of Brazil’s General Data Protection Law (LGPD, Law No. 13,709/2018 (opens in a new tab)) and Article 6(1)(f) of the European Union’s General Data Protection Regulation (GDPR (opens in a new tab)).

These logs are not used to build profiles of visitors, are not combined with other data and are not used for marketing.

3.2 Messages you send

If you contact Felipe Mikeias by email or through a profile listed on the contact page, he receives what you choose to send: usually your name, your email address or username and the content of the message.

Purpose: reading and answering your message and handling any follow-up.

Legal basis: legitimate interests in responding to the people who get in touch (LGPD Article 7, IX; GDPR Article 6(1)(f)) and, where you ask for something specific, taking the steps you requested.

Please do not send sensitive personal data (such as health information) unless it is necessary for your request.

3.3 Google Tag Manager

Every page loads Google Tag Manager (opens in a new tab), a script provided by Google. To deliver it, Google receives the technical data that is part of any web request: your IP address, your browser’s user agent and the address of the page you are visiting. If JavaScript is disabled, a hidden frame from the same Google domain is loaded instead, with the same data.

Purpose: verifying ownership of the site in Google Search Console and managing site tags without changing the site’s code. Search Console reports are built from data Google collects through its search engine; it adds nothing to these pages.

Legal basis: legitimate interests in operating and maintaining the site (LGPD Article 7, IX; GDPR Article 6(1)(f)).

On the date at the top of this page, the Tag Manager container has no published tags: it runs no analytics, advertising or tracking tools and sets no cookies. Google explains how it handles this data in Tag Manager data privacy and security (opens in a new tab) and in its Privacy Policy (opens in a new tab). If tags that measure visitors are ever added, this policy will be updated first and your consent will be requested where the law requires it.

3.4 What is not collected

The site does not use cookies, local storage or similar technologies. Apart from Google Tag Manager as described above, it does not use analytics or advertising services, does not create user profiles, does not use fingerprinting, and has no social media buttons or embedded third-party content that could track you. Because there is no tracking, there is nothing to switch off with “Do Not Track” or Global Privacy Control signals.

4. Cookies

mikeias.com does not set cookies, and Google Tag Manager, as currently configured, does not set any either. Your browser may keep copies of pages and images in its normal cache to load them faster; this is a standard browser feature, stays on your device and is not used to identify you.

5. Who receives the data

Personal data is not sold, rented or shared for advertising. It is only handled by:

• the hosting provider, which processes server logs on behalf of the site to deliver it. When the provider is listed in the summary above, its own privacy policy describes how it handles that data;
• Google, which delivers the Google Tag Manager script and receives the request data described in section 3.3, under its own privacy policy;
• the email or social network provider you use to send a message, which processes your message under its own privacy policy;
• public authorities, only if disclosure is required by law, regulation or a court order.

6. International transfers

Hosting and email providers, and Google for Tag Manager requests, may store or process data in countries other than your own, including the United States, including outside Brazil and the European Economic Area. When that happens, the transfer relies on the safeguards those providers offer, as permitted by Article 33 of the LGPD and Chapter V of the GDPR.

7. How long data is kept

• Server logs: for the period set by the hosting provider (see the summary above, when listed), after which they are deleted or anonymized by the provider.
• Google Tag Manager requests: according to Google’s own retention policies.
• Messages: for as long as needed to answer you and handle follow-up, then deleted — unless keeping them is required by law or needed to establish, exercise or defend legal claims.

8. Security

The site is served over HTTPS, so pages travel encrypted between the server and your browser. It is a static site with no database and no login, which keeps the amount of personal data to a minimum. No method of transmission or storage is completely secure, but reasonable measures are taken to protect the information described here.

9. Your rights

Depending on where you live, data protection laws give you rights over your personal data.

Under the LGPD (Brazil), Article 18, you may request: confirmation that your data is processed; access to it; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary or excessive data; portability; information about who your data was shared with; and you may object to processing based on legitimate interests when it does not comply with the law.

Under the GDPR (European Economic Area), Articles 15 to 21, you may request access, rectification, erasure, restriction of processing and data portability, and you may object to processing based on legitimate interests.

How to exercise your rights: write to the privacy contact shown in the summary above. You may be asked for information needed to confirm your identity or to locate your data — for example, the approximate date and time of your visit, since server logs are not linked to names. Requests are answered within the deadlines set by law, such as 15 days for a complete access request under LGPD Article 19 and one month under GDPR Article 12.

Complaints: you also have the right to lodge a complaint with a data protection authority — in Brazil, the National Data Protection Authority (ANPD) (opens in a new tab); in the European Economic Area, the supervisory authority (opens in a new tab) of the country where you live or work.

10. Children

This site is not directed at children and does not knowingly collect personal data from them. If you believe a child has sent personal data through a message, please get in touch so it can be deleted.

11. Links to other websites and RSS feeds

Articles link to other websites, such as the sources they cite. Those websites have their own privacy practices, which apply once you follow a link.

The RSS feeds are static files. Your feed reader requests them like any other page, so the request may appear in server logs; the feeds contain no tracking. The feed reader you use has its own privacy policy.

12. Changes to this policy

This policy will be updated whenever the way the site handles personal data changes — for example, if analytics or a contact form are ever added. The date at the top of this page shows when it was last updated. Significant changes will be highlighted on this page.

13. Contact

For any question about this policy or your personal data, use the privacy contact in the summary at the top of this page or the contact page.