Privacy Policy
Last updated: June 3, 2026
This site is a personal portfolio operated by Matheus Batista (the data controller). Your privacy matters — this page describes what we collect, why we collect it, how long we keep it, and what rights you have under Brazil's General Data Protection Law (LGPD, Law 13.709/2018).
Data controller
Matheus Batista, individual person, reachable at the email address listed in the Contact section of this site. There is no DPO appointed — the controller responds directly to data requests.
Data we collect
Contact form
When you submit the contact form, we store the email, name (optional), subject and message you provided so we can reply. These rows live in the database until you ask for deletion.
Analytics
Every visit records a pageview with: hashed IP (irreversible sha256), user-agent string, approximate geolocation (country, region, city) derived from the Vercel edge, screen and viewport dimensions, browser language, and the referring URL. The raw IP is never stored.
Cookies & local storage
We use first-party cookies for theme preference, locale, and the persona system. We also use browser localStorage to remember which persona you chose. No third-party tracking cookies are set.
Purpose
Contact data is used solely to reply to your message. Analytics data is used in aggregate to understand traffic patterns and improve content. We do not sell, rent or share your data with third parties for marketing.
Retention
Contact messages are kept for up to 24 months unless you ask for earlier deletion. Pageview rows are kept indefinitely in aggregate form (the hashed IP prevents re-identification).
Your rights (LGPD Art. 18)
You can request: confirmation of processing, access to your data, correction of incomplete or outdated data, anonymization or deletion, portability of data to another service, information about with whom we share data, and revocation of consent. Send any of these requests to the email in the Contact section — we reply within 15 days.
Third-party services
The site runs on Vercel (US/Brazil edge), uses Neon (US) for the database, Upstash Redis (US) for rate limits, Google Gemini (US) for the AI assistant, and Vercel Blob (US) for uploaded assets. Each provider has its own privacy policy — we share only the minimum necessary data with each one (e.g., the AI assistant receives your message text but not your IP).
Contact about your data
Use the Contact form on the homepage or write directly to the email listed there. Subject: "LGPD request" speeds up routing.