Privacy policy

This policy explains what information is collected when you visit notesandtests.com ("this site", "we", "us"), why it is collected, who it is shared with, and the choices you have. It covers visitors in the United States, the European Economic Area, the United Kingdom, and elsewhere.

1. Information we collect

Information you give us

If you email us or use a contact form, we receive your email address and whatever you write. We use it to reply and to keep a record of the exchange. We do not add you to a mailing list from a support message.

Information collected automatically

• Server logs. Our hosting provider records the IP address, browser user agent, requested URL, referring URL, and timestamp of requests, as a normal part of operating a web server and protecting it from abuse.
• Nothing else. This site runs no advertising tag, no analytics, no social network pixel, no session recording, and no fingerprinting. It sets no cookie of its own. If your browser arrives carrying advertising parameters in the address, our pages do not read them, store them, or pass them anywhere.

We do not knowingly collect personal information from children under 13, and we do not sell personal information for money.

2. Cookies and similar technologies

A cookie is a small file stored by your browser. Similar technologies include local storage and tracking pixels.

This site uses none of them. We place no cookie, no local storage entry and no tracking pixel. There is no analytics cookie and no advertising cookie, which is why you are not shown a consent banner: there is nothing to consent to. Nothing here needs to be switched off, and blocking cookies in your browser changes nothing about how this site reads.

3. Third-party services

There is one, and it is not an advertising service: this site loads its web fonts from Google Fonts. Your browser's IP address is necessarily visible to Google's servers when it requests those font files, and Google acts as an independent controller for what it collects that way. Its practices are described in Google's Privacy Policy and in How Google uses information from sites that use its services.

We run no Google Ads tag, no Google Analytics, and no tracking script of any kind. Nothing on this site reports your visit to anyone.

Affiliate links are the one exception, and only if you click one. Reviews here link to the seller's own store through an affiliate network. While you stay on this site, nothing is sent. The moment you follow such a link you leave for the network's address, and from that point your browser is talking to them: they receive your IP address, user agent, the page you came from, and they set their own cookie to attribute a possible sale. That happens on their systems under their policy, not ours, and it never happens without a click of yours.

4. Why we process your data, and on what legal basis

• To operate and secure the site — legitimate interests (GDPR Art. 6(1)(f)).
• To answer your messages — legitimate interests, or performance of a request you made (Art. 6(1)(b) / (f)).
• To be credited for an affiliate referral you chose to follow — legitimate interests (Art. 6(1)(f)), and consent where the network's own cookie requires it, given on their side.
• To meet legal and accounting obligations — legal obligation (Art. 6(1)(c)).

5. Who we share it with

We share data only with service providers acting on our instructions, or where a party collects it directly through its own technology:

• Hosting. Hostinger, which operates the servers delivering this site.
• Google. For web font delivery only, as described above. Google Ireland Limited and Google LLC act as independent controllers for what they collect that way.
• Affiliate networks and merchants. Only when you follow an affiliate link. The network — SmartAdv, and through it the merchant — receives the referral identifier so a commission can be attributed to us. We share nothing with them about visitors who do not click.

This site is operated from Brazil, and several of the providers above are based in the United States. Where personal data of visitors in the EEA or the UK reaches either country, the transfer relies on Standard Contractual Clauses, the EU–US Data Privacy Framework, or another mechanism permitted under applicable law. Brazilian processing is additionally subject to the Lei Geral de Proteção de Dados (LGPD, Law 13.709/2018), which grants rights comparable to those listed below; requests under the LGPD go to the same address.

6. How long we keep it

Server logs are retained for the period set by our hosting provider, typically a matter of weeks. Email correspondence is kept as long as needed to handle the matter and to meet record keeping obligations. Cookie lifetimes are set by whoever places the cookie and range from the end of your session to roughly two years.

7. Your rights

If you are in the EEA or UK (GDPR)

You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting processing already carried out. You may also lodge a complaint with your national supervisory authority.

If you are a California resident (CCPA/CPRA)

You have the right to know what personal information is collected and how it is used and disclosed, to request deletion, to request correction, and to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising. You may not be discriminated against for exercising these rights.

We do not sell personal information, and we do not "share" it for cross-context behavioral advertising as California law defines that term: there is no advertising cookie, no advertising identifier and no advertising network involved in your visit, so there is nothing to opt out of. You are welcome to write to matheuscataneo@gmail.com to confirm this in writing.

To exercise any right, email matheuscataneo@gmail.com. We respond within the time allowed by applicable law — 30 days under the GDPR, 45 days under the CCPA — and may need to verify your identity first. An authorized agent may act on your behalf with written proof.

8. Security

This site is served over HTTPS. We keep no user accounts, take no payments, and store no payment or health information. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Links to other sites

Outbound links lead to sites we do not operate. Their privacy practices are their own; read their policies before providing them with information.

10. Changes to this policy

We may update this policy. The revision date at the top always reflects the current version, and material changes will be summarized here.