Logo da AutisAutisAnalytics

Privacy

Privacy and Cookie Policy

This document describes, in verifiable terms, what data this site collects, what for, who it is shared with, and what you can demand about it.

Last updated: July 2026

Document being updated. The sections below describe the current behaviour of the site and are generated from the code itself. The sections listed at the end are still being drafted.

The essentials

  • We keep no database. This site stores nothing of yours on any server of ours.
  • There is no sign-up, no login, no profile and no browsing history attributed to you.
  • The contact form only collects when you click send, and the result is an email — not a record in a database.
  • No tracker or third-party content loads before you accept. Declining has a real effect.

Data collected and purposes

What you tell us

Only through the contact form, and only at the moment you click send. Nothing typed before that is captured: nothing is saved automatically, nothing is sent on each keystroke, and there is no measurement of how you fill it in.

FieldRequiredWhat for
NameYesTo know who we are replying to.
EmailYesReply address for your enquiry.
CompanyYesTo understand the context of the request.
MessageYesThe content of what you want to discuss.
PhoneNoAlternative channel, if you prefer.
Service of interestNoTo route your enquiry to whoever answers it best.

What third parties collect automatically

Only after you accept. This data does not pass through us: it goes straight from your browser to the third party, which is the one collecting it.

  • IP address and User-Agent, received by Google Analytics, Elfsight and Google Maps when they load.
  • Pages viewed and clicks on call-to-action buttons, measured by Google Analytics to understand how the site is used.

Storage and retention

We have no database.

This site has no database, no sign-up and no logged-in area. There is no record of you on any server under our control — there is nothing to query, export or leak from a database that does not exist.

Form data exists in a single form: the email delivered to Autis Analytics. It passes through Resend, an email delivery service based in the United States, and sits in the recipient inbox — like any email you would send directly. It is not written to a database of ours, nor used to track your browsing.

What stays in your browser is only your cookie choice and your theme preference, both detailed in the cookies section. Neither identifies you.

The retention period for received emails is yet to be defined and published — it is one of the sections still being drafted.

Sharing and international transfer

We do not sell, rent or hand over data to anyone. The third parties below are the only ones that receive anything, each with a specific role. None of them is triggered before you accept.

Third partyRoleCountryData it receivesWhen it is triggered
Google Analytics 4Audience measurementUnited StatesIP address, User-Agent, pages viewed and clicks on call-to-action buttonsOnly after you accept. Without acceptance, gtag.js is not loaded and no request reaches Google.
ElfsightWidget that renders the LinkedIn feedCyprusIP address and User-Agent, plus whatever storage Elfsight itself definesAfter you accept, or when you click "Load content" in place of the feed. It also depends on you scrolling down to that section.
Google MapsAddress map on the contact pageUnited StatesIP address and User-AgentAfter you accept, or when you click "Load content" in place of the map.
ResendService that delivers the email generated by the formUnited StatesThe fields you filled in on the formOnly when the form is submitted. Nothing you type before clicking send is captured.

Three of these processors are outside Brazil, which constitutes an international transfer. The applicable safeguards are among the sections still being drafted.

Cookies and browser storage

The table is generated from the inventory declared in the code. Strictly necessary items work without acceptance; the rest only exist after you authorise them.

Strictly necessary— no consent required

They work without acceptance because the site cannot operate correctly without them. They do not measure audience and are not shared with third parties.

NameControllerMechanismDurationPurpose
autis_consentAutis Analytics (first party)Cookie6 monthsStores your choice about analytics cookies and third-party content. Without it there is no way to honour a refusal between visits.
themeAutis Analytics (first party)localStorageUntil cleared in the browserTheme preference (light, dark or system). It does not identify the visitor and never leaves the browser.

Analytics— requires consent

Only written after you accept. Without acceptance, the Google Analytics script is not loaded — it is not just the cookie that ceases to exist, the file is never downloaded.

NameControllerMechanismDurationPurpose
_gaGoogle Analytics 4Third-party cookie2 yearsDistinguishes visitors to count sessions and page views.
_ga_<property-ID>Google Analytics 4Third-party cookie2 yearsKeeps session state within the GA4 property.

Embedded third-party content— requires consent

The LinkedIn feed and the address map come from third-party servers. They load after you accept, or when you click "Load content" in the space reserved for them. What each one writes is defined by the third party itself and is outside our control.

NameControllerMechanismDurationPurpose
Storage defined by ElfsightElfsightThird-party script and storageDefined by ElfsightRenders the LinkedIn feed. On load, Elfsight receives your IP and User-Agent.
Google cookies (e.g. NID)Google MapsThird-party cookieDefined by GoogleDisplays the address map. On load, Google receives your IP and User-Agent.

Your choices

On your first visit, the cookie bar offers accept or decline, with the same visual weight. Declining is not merely dismissing the notice: the Google Analytics script is not loaded, third-party embeds are not triggered, and any cookies Analytics had written are deleted.

Your choice is kept in the autis_consent cookie for 6 months and honoured on subsequent visits. After that period, the question is asked again.

Even after declining, you can load the map or the LinkedIn feed on a one-off basis by clicking "Load content" in the space reserved for them — that click applies to the current visit only and stores nothing.

You can also manage or delete cookies in your browser settings, which applies to any website.

To change your decision at any time: .

Your rights

Article 18 of the LGPD guarantees the rights below over your personal data. Some have limited reach here simply because we keep no database — but you may exercise any of them.

Confirmation and access

To know whether we process your data and what it is.

Correction

To correct incomplete, inaccurate or outdated data.

Anonymisation, blocking or deletion

Of unnecessary or excessive data, or data processed unlawfully.

Portability

To receive your data in a format that lets you take it to another provider.

Deletion

To erase data processed on the basis of your consent.

Information about sharing

To know which public and private entities your data was shared with — the section above already lists them all.

Information about not consenting

To know that you may refuse, and what the consequences of refusing are.

Withdrawal of consent

To change your mind at any time, through the preferences control on this page or in the footer.

How to exercise them

Write to the address below describing what you want. We may ask for additional information to confirm the request is yours — that is protection against someone requesting your data while posing as you.

contato@autisanalytics.com

Security

What can be stated about how data is protected on this site:

  • All traffic is served over HTTPS.
  • There is no database, sign-up or logged-in area — there is no store that could be exposed.
  • Email delivery credentials exist only on the server and never reach the browser.
  • No third-party script is downloaded before you accept, so nothing is handed to them without authorisation.

No measure removes risk entirely. Should a security incident occur with relevant risk to data subjects, notification to the ANPD and to the affected individuals will follow article 48 of the LGPD.

Changes to this policy

This page is updated whenever the behaviour of the site changes — a new third party, new data, a new purpose. The last updated date is at the top. If a change alters the scope of what you accepted, the cookie bar reappears so you can decide again.

Sections being drafted

The sections below depend on formal decisions by Autis Analytics and are still being drafted. Until they are published, to exercise any right over your personal data or to ask about this document, write to contato@autisanalytics.com.

Controller identification

Being drafted.

Data Protection Officer (DPO)

Being drafted.

Legal basis for each purpose

Being drafted.

Retention period for form data

Being drafted.

International transfer safeguards

Being drafted.

Limitation of liability

Being drafted.