Last updated: 2 October 2026.
Who is responsible
This is a personal portfolio and science communication site run by Fernando Osman Ramiro Pereira, who decides how the data described below is processed (controller, LGPD art. 5, VI). For any privacy matter, get in touch through the contact form.
What we collect and why
While you browse
You can read the whole site without an account. Internal analytics count views and downloads, with no advertising or fingerprinting. The random reading identifier lives in this tab's sessionStorage. Downloads use an HttpOnly cookie for up to 24 hours. The database stores only a daily hash of that identifier, the content and the time; no IP address, browser or referring URL is stored with the event. Events are deleted after 365 days by the maintenance routine. Do Not Track is respected. Fonts and images are served by the site itself.
Like any server, the hosting provider logs technical connection data (IP address, browser, page and time) to run and to protect itself from abuse. The site also counts form, download and sign-in attempts to block automated attacks. For that, the IP address is kept only as an irreversible code (a keyed hash), briefly, and never together with any other data about you. Legal basis: legitimate interest in the site's security (art. 7, IX).
When you send a message through the contact form
We store the name, email address, subject and message you write, and the date you accepted this notice. This data is used only to reply to you; it is never used for marketing, shared or sold. Legal basis: your consent (art. 7, I), which you can withdraw at any time. The IP address is not stored with the message.
Messages are deleted automatically after 12 months, or sooner if you ask.
PDF downloads
Public PDFs are delivered through temporary links (valid for 60 seconds) created on each click. Views and downloads are counted separately. The identity of whoever downloaded a file is not recorded. Signed links expire, but a file that has already been downloaded stays with whoever received it.
External videos
YouTube videos load only after you click play. When you do, your browser connects to the external provider, which applies its own privacy policy.
Who the data is shared with
The data is kept by services hired to run the site (processors, art. 5, VII):
- Railway: hosting for the site and the database;
- Cloudflare: file storage (R2) and, when configured, network protection and DNS.
These servers may be outside Brazil (for example in the United States or Europe). International transfers follow LGPD art. 33, with providers that adopt contractual clauses and compatible security measures. No data is sold or handed over for other purposes.
Your rights
At any time and free of charge, you can ask for confirmation that we process your data, access to it, correction, deletion, information about sharing, and withdrawal of consent (art. 18). Write through the contact form. We reply within 15 days. You can also complain to Brazil's data protection authority (ANPD).
How the data is protected
- All traffic uses HTTPS.
- Only the author can reach the admin panel, with a strong password and mandatory two-step verification. There is no public sign-up.
- The database is not exposed to the internet, and each query the site makes sees only what it needs: visitors never reach messages, drafts or sign-in data.
- Files are kept in private storage, and technical logs store neither email addresses nor IP addresses.
Cookies
Downloads use a random identifier in an HttpOnly cookie for up to 24 hours. If you pick a language in the EN/PT switcher, a preference cookie (fo-locale) remembers that choice for up to 12 months, only to open the site in the right language. The admin area uses strictly necessary session and two-step verification cookies, for the site's author only.
Content
Articles and documents discuss published studies and contain no patient data. The site is not aimed at children or teenagers.
Changes
If this notice changes, the date at the top will be updated.