VibeStorytelling

Privacy policy

How this site handles visitors' data, and how to exercise your rights. Last updated November 1, 2026.

The short answer

This site measures its audience with Google Analytics and Microsoft Clarity, relies on hosting logs, and has one contact form, delivered by e-mail. We do not sell visitor data and do not use it for advertising. To exercise your rights over your data, write to [email protected].

Who is responsible

vibe-storytelling.com is VibeStorytelling, by Fernando Palacios, kept by Storytellers, the trade name of Fernando Rodrigues Palacios ME, CNPJ 06.240.145/0001-46, based in São Paulo, Brazil, which is responsible for the processing. Contact for personal data matters, including as data protection officer: Fernando Palacios, [email protected].

What this site collects, and why

  • Contact form (/contact/): name, e-mail and message. Submissions go through Formspree, a service that delivers the message by e-mail to our team and keeps a copy under its own terms. Legal basis: steps prior to a contract, at your request (LGPD art. 7, V).
  • Audience measurement with Google Analytics 4: pages viewed, time on page, traffic source, device type and country. Google Analytics 4 does not store visitors' IP addresses. Google's advertising signals are switched off in the site configuration. Collected automatically on each visit, to learn which content is useful and where people leave. Legal basis: legitimate interest (LGPD art. 7, IX).
  • Usage measurement with Microsoft Clarity: heatmaps, clicks, scrolling and session recordings, with typed text masked by the tool itself. Collected automatically on each visit, to understand how pages are actually used. Legal basis: legitimate interest (LGPD art. 7, IX).
  • Hosting logs: Cloudflare, which serves the site, records technical connection data such as IP address, browser and requested page, for security and operation of the service. Legal basis: legitimate interest (LGPD art. 7, IX).

What this site does not do

  • Does not sell visitor data or use it for advertising, remarketing or ad audiences.
  • Does not ask for an account, password or payment data.
  • Does not turn the contact form into a mailing list: people who write get an answer, not a newsletter.

Cookies and browser storage

The only cookies are measurement cookies set by Google Analytics and Microsoft Clarity. The site uses no social media or advertising cookies. Your browser settings let you block or delete them, and the site keeps working.

How long we keep data

Google Analytics data is kept for the retention period set in the property. In Microsoft Clarity, by Microsoft's rule, session recordings are kept for 30 days and heatmaps for 13 months. Hosting logs follow the hosting provider's policy. What you send through the form or by e-mail is kept for as long as the conversation and the relationship last, and no more than five years after the last contact, unless the law requires otherwise.

Who data is shared with

We do not sell any data. Data only passes through the providers that make the site work and the measurement happen, to the extent needed: Cloudflare (hosting), Google (Google Analytics and mailbox), Microsoft (Clarity) and Formspree (contact form). Some of them process data outside Brazil, under the safeguards in their own terms.

Your rights

Under Brazil's data protection law (LGPD) you can:

  • Confirm whether we process your data, and access it
  • Correct incomplete, inaccurate or outdated data
  • Ask for anonymization, blocking or deletion of unnecessary or excessive data
  • Ask for portability to another provider
  • Ask for deletion of data processed with your consent
  • Know who we share your data with
  • Withdraw consent at any time
  • Object to processing based on legitimate interest

If you are in another jurisdiction, such as the European Union under the GDPR, you may have equivalent rights under your local law, and we will honor them on the same terms.

How to exercise them

Write to [email protected] with the subject Data Subject Rights. We answer within 15 days. If you ask for deletion and a legal retention duty applies, we tell you which one and for how long. You may also complain to Brazil's National Data Protection Authority (ANPD) or to your local authority.

This policy describes the processing that actually exists in the site's code, checked in the source and on the live site on the date above. When the site changes what it collects, this policy and its date change too. It is not legal advice, and review by a lawyer is still recommended.