Privacy

Who is responsible for your data

The people below make decisions about personal data processing at Rails Whey (data controllers). Contact them to exercise your rights, correct information you cannot change in Profile, or ask a privacy question.

• Rodrigo Serradura Marques Rodrigues: [email protected]

Your privacy rights

In Profile, you can access your data, correct your name, change permissions, download a copy and delete your account. For other requests, use a privacy contact on this page. Requests are free. You can request:

• Confirmation of processing and access to your data.
• Correction of incomplete, inaccurate or outdated data.
• Anonymization, restriction or deletion of unnecessary or excessive data, or data processed in breach of the LGPD.
• Transfer of your data to another provider, under applicable data portability rules.
• Deletion of data processed with consent, subject to lawful retention exceptions.
• Information about public and private entities with which we share data.
• Information about refusing consent and its consequences, and withdrawal of previous permission. Optional choices do not prevent access to the service.
• Objection to processing without consent that breaches the LGPD, and review of fully automated decisions that affect your interests.

We verify identity using only what the request requires. Under the LGPD, we provide complete access information within 15 days. We explain any lawful limitation. You can also contact the ANPD or consumer protection bodies.

What we collect

Your account stores your email, name, avatar initials, language, policy acknowledgment and optional choice history. We also record your visit origin, questionnaire answers and their history, challenges, messages, notifications and activity linked to your account. Sessions store IP addresses and browser information. Sessions and an agent key provide access to your account.

Why

We use account data to provide the service you request, including your questionnaire, curation and messages. This processing supports our service relationship. Access protection, minimal administrative history and limited usage measurement serve our legitimate interests in security and service operation, subject to your rights. Email updates and editorial use have independent preferences in Profile. Both start enabled when you complete your first visit. We keep records required by law when applicable.

Cookies and access

We use essential cookies to maintain access to your account. During restricted access, an authorization cookie permits entry for up to 12 hours. Site metrics do not use tracking cookies.

Site activity

When enabled, site metrics group visits with a temporary identifier derived from network and browser information. Different visitors can share this identifier; it does not prove who visited. After sign-in, we can associate the current visit with your account. We also record questionnaire, curation and message activity, without copying answers or message text into these records.

Emails and your account

Email updates are optional. They start enabled when you complete your first visit, unless you already unsubscribed or recorded a choice. You can turn them off in Profile or through the unsubscribe link in emails. This stops communications without deleting your account or answers. We still send access links that you request.

Website hosting and protection

Hetzner hosts the website and its database on a server in Nuremberg, Germany. Cloudflare receives connections before they reach that server to protect access and deliver content. This service processes IP addresses, request information and transmitted content across its global network, including outside Brazil.

Connected services and agents

Email delivery uses Resend, which receives the recipient address and message content. If you choose to sign in with GitHub or Google, we use the identity data you authorize to create or access your account. When you connect an agent through MCP, your chosen client receives the data returned to its requests, such as answers, challenges and messages. That service's rules govern its storage and use of those data. You can revoke the key on this site to prevent further access.

Your choices

Email updates and editorial use have separate controls. Both start enabled when you complete your first visit. We explain this default at that step and preserve recorded choices. You can disable both options and continue to use your account, questionnaire and curation. In Profile, you can grant or withdraw each choice, change your name, download your data and delete your account. Editorial permission allows future use of your saved and future answers, challenges and messages to plan courses, select content and build statistics. Withdrawal stops new editorial use; it does not undo earlier publications or anonymous totals. Permission to cite your name is a separate choice when you send a message. You can revoke agent access in Agent/MCP.

For how long

Your account and its associated data remain until account deletion. Unsubscribing does not erase them. Other retention periods are:

• Accounts that do not complete first access: removed after 30 days.
• Member sessions: expire after 30 days. Expired records are removed daily.
• Failed background tasks: removed after 7 days, once automatic retries have ended.
• Visits and browsing events: a 90-day limit.
• Minimal administrative records: 180 days to investigate access and changes, without copies of answers or messages. Cleanup runs daily.
• Key activity dates, days of use and consent history: remain with the account.

Daily cleanup routines can take up to one additional day beyond these periods.

Download your data

Open Profile and select Download my data. We generate the JSON file immediately, with no waiting period. It includes your profile, preferences, answers, answer history, messages, challenges, notifications and activity records. It also includes information about sessions and MCP use, without your account's access keys or tokens. We record the request date, without keeping a copy of the file. Account deletion removes that record. Download is optional and available before you complete first access. You do not need to download your data to delete your account.

Delete your account

Open Profile and confirm deletion with your account email. You can do this before you complete first access. Deletion removes your profile, individual answers and history, messages, challenges, notifications, sessions, MCP key and metrics linked to your account. Deleting a message removes it from your list and from content selection. Its record remains until you delete your account.

Statistics that may remain

With editorial permission, we may produce approximate counts of fixed-choice answers. Counts already combined before account deletion may remain. These counts have no account link, free text or profile combinations. We exclude small groups. Deletion removes all individual answers, including those that contributed to these counts. We do not create new statistics from your answers when you delete your account.

Deletion limits

Account deletion does not remove content already published outside this website or copies received by MCP clients. Deletion applies to the app's active database. Minimal administrative records have a separate 180-day limit. Backup copies and records required by law may have separate retention periods and may not be removed at the same time.