Last updated: September 29, 2026.
This policy explains what personal data CetoPlan (cetoplan.com) processes when you visit the site, for what purpose, on what legal basis, for how long, and what your rights are. The European Union’s General Data Protection Regulation (GDPR) applies, as does, for visitors in Brazil, the Lei Geral de Proteção de Dados (LGPD).
Who is the controller
The data controller is Mariana, author of CetoPlan. For any questions about your personal data, or to exercise your rights, write to [email protected].
What data we process and why
Server logs
When you open a page, the server logs the IP address, date and time, requested page, referring page, and browser. We use these logs to keep the site secure and running (legitimate interest, Article 6(1)(f) GDPR; Article 7(IX) LGPD). They are automatically deleted after 90 days. The site is hosted on servers of Hetzner Online GmbH in Germany.
Cloudflare
The site’s traffic passes through Cloudflare, Inc., which protects it against attacks and delivers it faster. Cloudflare processes your IP address and technical request data. The site also asks Cloudflare which country you are in, to know whether it should ask for your consent before loading statistics and advertising tools.
Contact form
If you write to us via the contact form, we store your name, email, and message to respond (fulfillment of your request / legitimate interest). We keep the messages for as long as needed to answer and follow up on your request, and for at most 12 months; after that they are deleted automatically.
Comments
If you leave a comment, we store your name, email, website (optional), comment, IP address, and browser, to moderate and prevent spam.
Advertising, statistics, and cookies
In the European Economic Area, the United Kingdom, and Switzerland, no personalized advertising or statistics are loaded before you make your choice. A Google consent window (certified under IAB TCF v2.2) lets you consent, refuse, or choose by purpose. You can change your choice at any time via the “Privacy and cookie settings” link in the site footer.
The consent window itself and the ads are served by Google and load resources from Google’s servers (e.g., fonts and icons), which implies sending your IP address to Google. The site’s own fonts are served by our server.
- Google AdSense (Google Ireland Ltd.): shows ads on the site. With your consent, it may use cookies and identifiers for personalized ads; without consent, Google only shows limited or non-personalized ads.
- Google Analytics 4 (Google Ireland Ltd.): aggregated site usage statistics. In Europe, it is only loaded with your consent, without Google advertising signals.
- Meta Pixel (Meta Platforms Ireland Ltd.): measures page visits. It is never loaded in the European Economic Area, the United Kingdom, or Switzerland.
Outside these regions (e.g., in Brazil), Google Analytics, AdSense, and the Meta Pixel are loaded when the page opens, based on the legitimate interest of keeping the site free and measuring its use. You can object by blocking third-party cookies in your browser or writing to the contact above.
International transfers
Google, Meta, and Cloudflare may process data in the United States. These transfers take place under the EU-US Data Privacy Framework, for certified companies, or under the European Commission’s Standard Contractual Clauses.
Your rights
You may request access to your data or its rectification, erasure, restriction, or portability, object to processing based on legitimate interest, and withdraw your consent at any time, without affecting processing carried out before the withdrawal. We respond within one month. You may also lodge a complaint with the data protection supervisory authority of the country where you live or work (in Portugal, the CNPD, www.cnpd.pt) and, in Brazil, with the ANPD (www.gov.br/anpd).
Minors
The site is not directed at minors under 16 and does not knowingly process their data.
Changes
If this policy changes, the date at the top is updated.
