Privacy Policy
Last updated: August 27, 2026.
Atraca is a content website about digital marketing, business and technology. This policy explains, plainly, which personal data is processed when you browse here, for what purpose, and which rights the LGPD (Lei Geral de Proteção de Dados, Law No. 13,709/2018, the Brazilian General Data Protection Law) guarantees you.
We wrote this document describing what the site actually does. If anything changes, the date above changes with it.
Who the controller is
Atraca is the controller of the data processed on this website. For any matter related to privacy and data protection, including to exercise the rights described below, the channel is:
What this website does NOT do
We start here because it clears up most questions:
- There is no sign-up and no user accounts. You do not create a login to read anything.
- There are no forms. There is no contact, comment or newsletter form on this website.
- We do not sell, rent or hand over personal data to third parties for commercial purposes.
- We do not request sensitive data (racial or ethnic origin, religious belief, political opinion, health data, biometrics, among others listed in art. 5, II of the LGPD).
- We do not knowingly process data of children and adolescents. The content is aimed at an adult professional audience.
What data is processed
Browsing data
When you access a page, technical data is generated automatically, as happens on any website. This typically includes: IP address, browser type and version, operating system, language, pages visited, time spent, and the source of the visit (for example, whether you came from a search engine or from a link).
This data is used in aggregate, to understand which content is useful and how to improve the website. We do not use it to try to identify you individually.
Data you send us by email
If you write to contato@atraca.com.br, we will process the data you yourself include in the message (name, email and whatever else you decide to write), exclusively to reply to you.
Cookies and similar technologies
This website loads Google Tag Manager, a Google tool that manages audience measurement tags. Through it, cookies and identifiers may be stored in your browser to measure and analyze traffic.
None of this runs before you agree. On your first visit we show a notice at the bottom of the screen with two options of equal weight: Accept and Reject. Until you choose, measurement is disabled by default, and it stays disabled if you choose to reject. Technically, this is done with Google’s Consent Mode: storage starts out denied and is only enabled with your agreement.
Rejecting does not limit your reading of the website in any way: no content is blocked.
Your choice is stored in your own browser. To change your mind at any time, use the “Cookie preferences” link in the footer of any page, which reopens the notice. Independently, you can also block or delete cookies in your browser settings, browse in private mode or use extensions that block measurement scripts.
Who the data is shared with
Only with the processors needed for the website to exist and work:
- Cloudflare: hosting, content delivery (CDN) and security. It processes requests, IP addresses and access logs to serve the pages and protect against abuse.
- Google: through Google Tag Manager and the audience measurement tools configured in it.
These providers operate with infrastructure outside Brazil, which constitutes an international data transfer, allowed by the LGPD in the cases of art. 33. Each of them maintains its own privacy policy, which we recommend you read.
We may also share data when there is a legal or regulatory obligation or an order from a competent authority.
Legal bases
Processing relies on the following legal bases of art. 7 of the LGPD:
- Consent (item I): for audience measurement through cookies, collected through the notice described above and revocable at any time.
- Legitimate interest (item IX): for website security and the keeping of technical access logs, with minimal impact on you.
- Compliance with a legal obligation (item II): when the law requires information to be retained or handed over.
- Regular exercise of rights (item VI): in any administrative, judicial or arbitration proceeding.
How long we keep data
Access logs and measurement data are kept for the period needed for the purposes above and for the applicable legal periods, observing, where applicable, the retention period for access logs set by the Marco Civil da Internet (Law No. 12,965/2014, the Brazilian Civil Rights Framework for the Internet). Email messages are kept for as long as they are useful for handling your request and for any eventual proof of what was handled.
Your rights
Art. 18 of the LGPD guarantees you the right to request, at any time:
- confirmation that your data is being processed;
- access to the data;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law;
- portability to another provider;
- deletion of data processed based on your consent;
- information about who we share your data with;
- information about the possibility of not giving consent and its consequences;
- revocation of consent;
- objection to processing carried out under one of the cases that waive consent, if the law is not complied with.
To exercise any of them, write to contato@atraca.com.br. We will reply as soon as possible. We may ask for additional information to confirm your identity before handling the request; this is a security measure that protects the data subject.
You can also petition the ANPD (Autoridade Nacional de Proteção de Dados, the Brazilian National Data Protection Authority) directly.
Security
We adopt reasonable technical and administrative measures to protect the data processed, including traffic encrypted with HTTPS across the whole website and edge protection against malicious traffic. No system is infallible: if a security incident occurs with relevant risk to data subjects, we will take the measures of art. 48 of the LGPD, including notifying the ANPD and those affected.
Links to third-party websites
Our content cites and links to tools, documentation and external sources. When you follow those links, you become subject to the privacy policies of those third parties, over which we have no control or responsibility.
Affiliate links
Some posts recommend books or gear and link to Amazon (amazon.com in English posts). As an Amazon Associate I earn from qualifying purchases, which means that if you buy through that link, I receive a commission at no additional cost to you. These links are always identified in the recommendation block itself and marked in the code with rel="sponsored", as Google’s guidance requires.
This does not change the editorial criteria: we only recommend a book or piece of gear we consider useful for the subject of the post, and the recommendation always comes with the reason. The commission does not define what is recommended, and no affiliate link changes the price, availability or purchase conditions on the other side.
When you click, you are taken to Amazon and become subject to its privacy policy, including the cookies it uses to attribute the referral.
Changes to this policy
This policy may be updated to reflect changes in the website, in the tools used or in the law. The “last updated” date at the top indicates the current version. Relevant changes will be flagged on this page itself.
Questions
Any question about this document or about how your data is processed: contato@atraca.com.br.