Privacy policy
This policy explains how Rota42 processes personal data when providing public content, protecting the administrative area, measuring audiences and displaying advertising. Public reading does not require an account, and data minimization is part of the design.
Controller and contact
The controller of this website is Gabriel Henrique da Silva. Personal data requests may be sent to help@rota42.com.
Data that may be processed
We may process IP addresses and other connection details, browser and device data, security logs, administrative sessions, language, theme and consent preferences. We avoid collecting or retaining data beyond what each purpose requires.
Purposes and legal bases
- Operate the site, maintain administrative sessions, remember preferences and prevent fraud or abuse based on service delivery, legal obligations and the legitimate interest of protecting the operation.
- Respond to contacts and requests initiated by the data subject, using only the data required for the response and operational record.
- Measure audience, navigation and performance only after analytics consent.
- Provide advertising; storage, full measurement and personalization are subject to the corresponding choice and the rules applicable to the visitor’s region.
Processors and external services
Cloudflare provides DNS, CDN and edge protection and may process technical connection data to deliver and protect the site.
Cloudflare Turnstile protects administrative authentication against automated abuse and processes the technical data required to assess the security challenge.
Google Analytics 4 receives navigation events and technical information after analytics consent. The property configuration must prevent names, email addresses or other personal identifiers from being sent in events.
The Google AdSense loader is requested on public pages with denied consent signals and data redaction enabled. Cookies, advertising identifiers, full measurement and personalization are enabled only after marketing consent. Personalized ad availability also depends on the mechanism required by Google in each visitor region.
Infrastructure providers and optional services may process data outside Brazil. In such cases, processing is subject to the contractual safeguards and legal mechanisms applicable to each provider identified above.
Consent and your choice
Necessary storage remains active. Analytics, personalization and marketing start disabled and are enabled only through a positive choice. “Accept all” enables all three optional categories; “Necessary only” disables them. The choice expires after 180 days and can be changed or withdrawn at any time.
Your rights
Under the Brazilian LGPD, you may request confirmation of processing, access, correction, anonymization, blocking, deletion, portability where applicable, information about sharing and review or withdrawal of consent. Requests must be sent to the privacy contact above and may require proportionate identity verification.
Retention and security
Local consent preferences are renewed every 180 days. Other data is retained for as long as required by the stated purpose, security, the establishment of legal claims or legal obligations. Administrative accounts use granular authorization and access controls.