English Edition
Updated on: Abundância: O Código

Privacy Policy

This Privacy Policy explains how Abundância: O Código (https://abundanciaocodigo.com.br) collects, uses, stores, and safeguards personal data in strict compliance with the Brazilian General Data Protection Law (LGPD, Federal Law No. 13.709/2018) and recognized international standards for digital consent and transparency.

This policy applies equally across all three language editions of the portal: Portuguese (/ - pt-BR), English (/en/ - en), and Spanish (/es/ - es).

1. Data Controller and Data Protection Officer (LGPD, Art. 41, §1)

  • Data Controller: Abundância: O Código (https://abundanciaocodigo.com.br)
  • Data Protection Officer (DPO): Privacy Team at Abundância: O Código
  • Official privacy contact: contato@abundanciaocodigo.com.br (or via our Contact page using the subject LGPD: Data Subject Request)

2. What Data We Collect and Why

We collect only the minimum information required to fulfill each feature explicitly requested by the visitor:

Newsletter Subscription (Double Opt-In)

  • Data processed: email address submitted voluntarily, chosen language edition (pt-BR, en, or es), subscription status (pending, active, or unsubscribed), consent version and origin, timestamp, an irreversible cryptographic hash of the IP address (HMAC-SHA256) for consent verification and abuse prevention, and a signed cryptographic token for confirmation and unsubscribing.
  • Network privacy: we never store plaintext IP addresses in our newsletter database or application logs; we retain only the server-generated irreversible HMAC-SHA256 digest created with a dedicated secret key.
  • Purpose: verify that the email owner genuinely requested the subscription (double opt-in confirmation link valid for 24 hours) and deliver editorial updates in the subscriber’s selected language.

Contact Form

  • Data processed: name, email address, selected language edition (pt-BR, en, or es), subject, message content, acknowledgment of this Privacy Policy, and an irreversible cryptographic IP hash (HMAC-SHA256) for spam defense (without storing raw IP addresses).
  • Purpose: validate submission integrity, review your inquiry, and reply directly to your message.

Infrastructure Security and Anti-Abuse Protection

  • Data processed: server-verified anti-bot challenge token (Cloudflare Turnstile) and transient rate-limit counters indexed solely by an opaque irreversible HMAC-SHA256 key derived from the request origin and route, with no plaintext IP storage.
  • Operational logging policy: application error and performance logs are strictly configured to record zero personally identifiable information (zero PII in logs).

All personal data processing on this portal relies strictly on the legal bases established in Article 7 of Brazilian Law No. 13.709/2018:

  • Data subject consent (Art. 7, I): sending newsletter emails after double opt-in confirmation, storing non-essential cookies, and loading external media embeds or advertising scripts after explicit affirmative consent.
  • Preliminary procedures or fulfilling a user request (Art. 7, V): receiving, reviewing, and replying to messages submitted via the contact form.
  • Legitimate interest with safeguards (Art. 7, IX): technical defense against automated abuse, rate limiting, and server stability without invasive behavioral profiling.

The portal enforces Google Consent Mode v2 with strict prior blocking (default denied) before any affirmative choice by the visitor:

  • Blocked before consent: no non-essential cookies, analytics measurement scripts, advertising signals (ad_storage, ad_user_data, ad_personalization, analytics_storage), or third-party video embeds are loaded or executed prior to explicit user consent in the preference banner.
  • Embedded videos (YouTube): videos embedded inside guides use YouTube’s privacy-enhanced domain (youtube-nocookie.com) and stay locked behind a placeholder until you explicitly authorize external media playback.
  • Symmetrical, coercion-free choices: our consent banner displays Accept all and Reject optional buttons with equal visual prominence and convenience, allowing you to review, minimize, or withdraw your preferences at any time.

Some articles include editorial recommendations for books, tools, or courses using affiliate links (technically marked with rel="sponsored noopener noreferrer"). Clicking an affiliate link takes you to an external merchant site governed by its own privacy policy and attribution cookies. Abundância: O Código never sells, rents, or shares your email list or contact messages with affiliate networks.

Advertising and Third-Party Cookies (Google AdSense)

This policy clearly explains how programmatic advertising through Google AdSense operates whenever enabled to sustain the portal:

  • Third-party vendors, including Google, use cookies and advertising identifiers to serve ads based on a visitor’s prior visits to this website or other websites on the internet, solely when valid prior consent has been granted via Google Consent Mode v2.
  • Google’s use of advertising cookies enables Google and its partners to serve relevant ads to visitors who have consented to advertising cookies.
  • Visitors who decline advertising cookies continue to have full, unrestricted access to all editorial articles without ad personalization, and may manage or opt out of personalized advertising at any time via Google Ads Settings or review How Google uses information from partner sites.

6. Secure Storage, Retention, and Encrypted Backups

  • Storage architecture: newsletter records and contact submissions are stored in an isolated database within our dedicated server infrastructure, protected by an outbound-only encrypted network tunnel and restricted access controls.
  • Encrypted backups: periodic encrypted backups are written to compatible cloud object storage (Cloudflare R2) to support disaster recovery without plaintext exposure.
  • Retention schedule:
    • Unconfirmed newsletter requests (pending double opt-in) automatically expire after 24 hours and are purged by scheduled cleanup routines.
    • Confirmed subscribers remain active until they click unsubscribe or request full erasure (including removal of their subscriber row and associated HMAC-SHA256 IP hash upon request).
    • Contact messages and their associated HMAC-SHA256 IP hashes are retained only as long as required to complete support, perform scheduled purging, or comply with legal obligations.
    • Transient rate-limit counters (HMAC-SHA256 keyed) expire automatically at the end of each short control window and are purged routinely.

7. Your Rights and 1-Click Unsubscribe

Under Article 18 of Brazil’s LGPD, you may request at any time:

  • Confirmation of processing and access to personal data held about you;
  • Correction of incomplete, inaccurate, or outdated data;
  • Anonymization, blocking, or deletion of unnecessary data or data processed on the basis of consent;
  • Withdrawal of previously granted consent;
  • Information regarding strictly necessary operational processors (such as our transactional email delivery provider and edge security infrastructure).

To exercise any of these rights, email contato@abundanciaocodigo.com.br or use our Contact page.

Direct 1-Click Newsletter Unsubscribe

Every newsletter email sent by Abundância: O Código includes a prominent 1-click unsubscribe link protected by a signed token, immediately removing your address from the active mailing list without requiring any login, password, or explanation.

8. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect security improvements, regulatory updates, or portal enhancements. The latest revision date is always displayed clearly at the top or metadata of this page.