What this site
knows about you

Who is responsible

Helena Duppre, as an individual, is the controller of the data processed on helenaduppre.com. Any request about your data reaches her at the e-mail address at the end of this page.

What is collected

• Comments: the name and the text you write in the form, with the date and time it was sent. They stay public on the post page, visible to anyone.
• Like cookie (portfolio_fp): a random number stored in your browser, with no name and no e-mail, only so the site knows that like was already given.
• View cookie (pv-…): marks for 24 hours that the post was already counted, so the same visit is not counted twice.
• Throttle cookie (comment_throttle): lasts 20 seconds and prevents the same comment from being sent repeatedly.
• Theme cookie (theme): stores whether you chose light or dark mode.
• IP address as an irreversible code (SHA-256 hash): the address itself is never stored. It only limits how many submissions come from the same source and holds back spam bots.
• Audience metrics through Google Analytics 4: page views, traffic source, device type and approximate location by country or region.

What each one is for

Comments exist for the public conversation about the text. The like and view cookies exist so the counters do not count the same person twice. The IP hash exists to hold back automated abuse. Audience metrics exist so I know which subjects matter and what to improve. None of it is sold, cross-referenced with another database or used for advertising.

Legal basis

Counters, abuse limiting and audience metrics rely on legitimate interest (art. 7, IX of the Brazilian LGPD): the data is minimal, identifies no one, and the site could not run honestly without it. Comments rely on what you choose to send, knowing it will be public — the notice is on the form itself. You can object to any of these at the e-mail address below.

How long it is kept

• Comments: as long as the post exists. You can ask for yours to be removed at any time.
• Like cookie: 180 days.
• View cookie: 24 hours.
• IP hash for abuse limiting: up to 30 days.
• Google Analytics: as configured in the tool, currently 14 months.

Analytics, and how to stay out of it

The site uses Google Analytics 4 to measure audience. Google's three advertising signals are denied by default: no remarketing, no ad personalisation, no data selling. If you still prefer not to be counted, use the button below, browse in a private window or keep a blocker on — the site works the same either way.

International transfer

Google Analytics processes audience data on servers outside Brazil, including in the United States, under Google's own data processing terms. Comments and counters live in a database hosted by Netlify, also outside Brazil.

Your rights

• know whether any data of yours is here and have access to it;
• correct incomplete or outdated data;
• ask for your comment, or any data of yours, to be removed;
• object to processing based on legitimate interest;
• know who the data is shared with.

To exercise any of them, write to the e-mail address below. The answer comes within 15 days.

Contact channel

Questions, removal requests or anything about your data: helenaduppre@gmail.com

Changes to this policy

If what the site collects changes, this page changes with it and the update date at the top becomes the date of the new version.