Privacy Policy

Data protection guidelines and compliance with the LGPD (Law 13.709/2018).

The Laboratory for Innovation and Digital Rights at the UFBA Faculty of Law (LABID²) takes your privacy seriously. This policy sets out how your data is handled, transparently and securely.

This is a translation provided for convenience. The Portuguese version is the one with legal effect under the LGPD; if the two differ, the Portuguese text prevails.

Last updated:

1. This site does not use cookies

No cookie is created by this site — neither first-party nor third-party. We also use no tracking pixels and no tools that follow you across other sites. That is why there is no cookie banner interrupting your visit here: there would be nothing to consent to.

2. Audience measurement

We count how many people visit the site, which pages are read most and which buttons are clicked most. That counting is done by our own system, and it identifies nobody: we create no identifier that would let us recognise you on a later visit, and we store nothing permanent in your browser. What is recorded are aggregate numbers — for example, "this page had 240 views" — with no way whatsoever to tie a view to a person. If your browser sends a tracking-refusal signal (GPC or Do Not Track), even that counting does not happen.

About your IP address: our system never reads or stores your IP. It is seen by Cloudflare, the company that hosts the site and therefore receives your browser's connection — as would happen with any server on the internet. From it we record only the country the visit came from, alongside the aggregate numbers. Neither the IP nor anything derived from it that identifies you is kept by us.

3. When you get in touch

The site has no form and collects no data from those browsing it. Contact is by email: when you write to us, you decide what to tell us, and we receive whatever is in your message — usually your email address, your name and the content you wrote. We use that data only to reply to you.

4. YouTube videos

Embedded videos stay blocked until you ask to watch. When you click play, we explain that Google will receive your IP address and information about your browser, and you choose between loading the video here, opening it on YouTube, or cancelling. Nothing is sent to Google before that choice. Podcasts and social media profiles are links only: nothing is transmitted until you click and leave the site.

If you do allow videos, we keep that permission in your browser so as not to ask again. To undo it, use the "Forget external video permission" button in the footer of any page.

Four pieces of information, none of them tied to your identity — and all of them written only after you choose something:

  • The visual theme, if you pick one under Preferences in the footer: dark, light or "follow the system". Kept until you clear your browser data. With no choice made, the site uses the dark theme and stores nothing.
  • The animation preference, if you pick one under Preferences: reduce or allow. With no choice made, the site follows your system's accessibility setting and stores nothing.
  • Permission to load videos, if you grant it — revocable via the button in the footer of any page.
  • A session marker used only to avoid counting the same visit twice. It is a single "this tab has been counted" signal, with no identifier, and it disappears when you close the tab.

None of these preferences is sent to our servers. Neither is the session marker: it only decides, within your own browser, whether the count has already happened.

6. Team data published on the site

This is the only personal data the site publishes, and it is not visitors' data: it is the laboratory team's. The team pages and the byline of each article carry the name, photo, institutional email and links to the LinkedIn and Lattes CV of researchers, teaching staff and students affiliated with LABID².

This is academic dissemination data, published in the context of university outreach — the same information already found in a public CV. There is no sensitive data, and no data that was not provided by the person themselves for this purpose.

If you are or were part of the team and want to correct, update or withdraw your data from this page, write to us via the contact page. The request is handled within the same deadline as the other rights in item 8.

7. Where the site is hosted

The site is hosted by Cloudflare, on servers outside Brazil. That means the technical data needed to deliver the page to you — your IP address and the information any browser sends when requesting a site — is processed abroad. This is an international transfer of data, provided for in art. 33 of the LGPD, and it is worth recording even though there is no registration and no collection of visitor data.

Nothing beyond that leaves Brazil, because nothing beyond that is collected.

8. Your rights

Under Article 18 of the LGPD, you have the right to request access, correction, anonymisation, blocking or deletion of your personal data, as well as portability and information about who we share it with. To exercise these rights, contact us via the contact page.

We reply within 15 days, counted from receipt of the request, under art. 19, II of the LGPD. If the request cannot be met, the reply will say why.

In practice, for someone who merely browses the site there is no data to access or delete: as described in items 1 to 5, nothing identifying you is collected or stored. The right is exercisable over the team data in item 6 and over whatever you send us by email.

The data controller for this site is LABID², under LGPD art. 5, VI.

The laboratory has not yet officially named a data protection officer (DPO), as required by LGPD art. 41. Once one is named, the name and contact channel will appear on this page — with no code change required.

Two further channels, available regardless of who the DPO is: