How we handle your data

Who is responsible

BlackMoney is operated by Pedro Santilli de Souza, registered in Brazil under CNPJ 61.757.009/0001-36, based in Marília/SP, Brazil. For anything related to privacy, including the rights described below, write to pedrosantilli2013@gmail.com or use the contact page.

Because the operator is established in Brazil, your data is processed there. If you are in the European Economic Area or the United Kingdom, that is a transfer outside your jurisdiction; we rely on your consent and on the contractual necessity of answering you.

What we collect, and nothing more

There is no account to read this site. The only data that exists is what you hand over yourself:

• Newsletter — your email address, nothing else. Legal basis: consent.
• Contact form — name, email and the message. Legal basis: consent, so we can reply.
• Comments — the name you type and the text. These are public on the article; don't put anything there you wouldn't want visible.
• Access logs — IP address, date, time and page, recorded by the server. Legal basis: legal obligation under Brazil's Marco Civil da Internet (art. 15) and legitimate interest in preventing abuse, since our rate limiting works by IP.

We do not knowingly collect data from anyone under 18, we never ask for government identifiers, we never ask for bank details, and we never ask about your net worth.

Cookies and browser storage

The site stores your theme choice (light or dark) in your browser's localStorage. That is not a cookie, it never leaves your device, and it identifies no one.

There is exactly one cookie, a session cookie, and it is only created for someone signing in to the editorial panel. A regular reader receives no cookie at all.

What we don't do

We do not sell, rent or trade your data. We do not use your email for anything you didn't ask for. The site loads no fonts, scripts or images from third parties — the typography is your own system's and the photographs are served from this domain, so browsing here does not hand your IP address to other companies.

How long we keep it

• Newsletter email: until you unsubscribe.
• Contact messages: 2 years, to keep a record of correspondence.
• Comments: while the article is published, or until you ask for removal.
• Access logs: 6 months, the minimum required by the Marco Civil.

Your rights

Whatever jurisdiction you are in, you can ask us at any time and free of charge to: confirm whether we process your data, give you access to it, correct anything wrong or incomplete, delete what is no longer necessary, export it, tell you who we share it with, and withdraw consent.

Under the GDPR you additionally have the right to object to processing and to lodge a complaint with your national supervisory authority. Under the CCPA, California residents may request disclosure and deletion — and note that we do not sell personal information, so there is nothing to opt out of. Under the LGPD, you may complain to Brazil's ANPD.

Write to the address at the top of this page. We answer within 15 days.

Security

All traffic is encrypted over HTTPS. The editorial panel requires authentication and limits sign-in attempts. No system is impenetrable: if there is an incident likely to create meaningful risk, we will notify those affected and the relevant authority, as required by LGPD art. 48 and GDPR art. 33.

Changes

If this policy changes, the date at the top changes with it. Any change that materially affects how we handle your data will be emailed to newsletter subscribers.