Privacy notice
What this notice covers
This notice explains, in plain language, what information this site collects, why it is collected, how long it is kept and how you can ask for it to be deleted. It follows the principles of Brazil's general data protection law (Lei Geral de Proteção de Dados, Law 13.709/2018).
What is collected
News sign-up: your email address, your first name if you choose to give it, and the fact that you gave consent.
Access requests for the restricted sections: the information you type into the form, which may include your name, email address, WhatsApp number, institution, role and the reason for your request.
Basic technical information needed to serve the pages, including the country your connection appears to come from, which is used only to choose a starting language.
If you are approved for a restricted section, a record of which documents you open or download, kept for the chain of custody of the evidence.
Why it is collected
To send you the news you asked for, to decide on your access request, to protect restricted documents, and to keep an honest record of who has seen sensitive material.
Nothing is used for advertising. There is no third-party advertising or analytics tracking on this site, and your information is never sold or shared for marketing.
How long it is kept
News sign-ups are kept until you ask to be removed. Access requests and access logs are kept while the record remains active, because they form part of its documentation. Anything not needed is deleted.
Your rights
You may ask what information is held about you, ask for corrections, withdraw your consent, and ask for your information to be deleted. Requests are handled by the site owner personally.
Requests about your data are made through the contact channels shown once you are in contact with the owner; they are not published on the public pages for safety reasons.
Security
Restricted documents are held in private storage and are never published as open links. Approved users receive short-lived private links. Access is checked on the server, not only in the browser.