Privacy policy
Last updated 11 November 2026
This policy covers the public site guics.me.
Who the controller is
guics is the personal blog of Guilherme da Cruz Silveira, who is the controller of the personal data processed on this site under Brazil’s General Data Protection Law (LGPD, Law No. 13,709/2018).
To ask about this policy or your data, use the contact page.
What the site collects and what it does not
The site has no user accounts, newsletter or comments. The only collection of sign-up data happens in the AI assessments, and only when you complete them and tick the consent box. Outside them, the site does not ask for your name, your email or any other sign-up data.
The site does not use advertising cookies or social-media pixels. Fonts and the site’s own scripts are served by guics.me.
AI assessments
The AI readiness and AI opportunities assessments are questionnaires. In exchange for the result, you provide some data. This part of the policy explains what happens to it.
Data processed. Name; company (required on some paths, optional on others); industry or segment; email and/or WhatsApp number (at least one of the two); postcode (CEP) and, from it, city, state and neighbourhood (the site does not ask for street, number or unit); your answers and the calculated result; the status of each delivery through the contact channels you provided; the consent record (accepted text, version, date and time). To protect the form against abuse, the API also keeps a hashed version of the IP address and the browser identifier.
Purposes. Showing the assessment result on screen; sending the result as a PDF through the email and/or WhatsApp you provided; contacting you about the assessment; and getting an approximate location (city and state) from the postcode, without an address.
Legal basis. Processing relies on your consent (art. 7, I, of the LGPD), given through the consent box at the end of the form. Without consent, nothing is saved or sent and the result is not shown. The PDF is only sent if you consented and provided the corresponding contact detail. You can withdraw consent at any time through the contact page; withdrawal does not affect what was done before it.
Who the data may be shared with. Assessment data is stored in a Cloudflare database (Cloudflare Workers and D1), which hosts the programming interface that receives the form. The postcode you type is looked up on ViaCEP, a public postcode lookup service, only to show city, state and neighbourhood; only the postcode is sent. If you provided an email, your name, email and the PDF may go through the email provider used for sending; if you provided a WhatsApp number, your number and the PDF may go through Meta’s official WhatsApp Business platform, only for that delivery. These providers may process data outside Brazil. Beyond these cases, the data is not shared.
How long. Data is kept for as long as needed for these purposes or until you ask for deletion, whichever comes first.
Access. Data is kept in a private admin area, with access restricted to the controller. The site does not send your answers or contact details to Google Analytics.
The form sets no cookie and stores nothing in your browser: answers stay only in the tab’s memory until they are sent.
Audience measurement
The site uses Google Tag Manager and Google Analytics 4, Google services, to measure visits and engagement: which pages are viewed, for how long, where the visit comes from and on what kind of device and browser. To do this, your browser loads scripts from Google, sends it technical data about the visit (such as the page address, referrer, IP address and browser identifier) and may set measurement cookies such as _ga and _ga_*.
No Google Ads, Google Signals, remarketing or Meta pixel has been linked to this setup.
What Google does with this data is governed by the Google Privacy Policy and explained in How Google uses information from sites or apps that use our services. The cookies are described in the cookie policy.
Hosting access logs
The pages are static files served by Firebase Hosting, a Google service. To deliver the pages, keep the service secure and diagnose failures, the provider may log technical data about each request, such as IP address, date and time, the page requested and the browser identifier (user-agent).
These logs follow the provider’s practices, described in Privacy and Security in Firebase.
The site’s traffic goes through Cloudflare, which may add its own measurement script to the pages (Cloudflare Web Analytics, loaded from static.cloudflareinsights.com). Cloudflare’s processing is governed by the Cloudflare privacy policy.
What stays in your browser
Besides the Google measurement cookies described above, the site keeps two items in your browser. They are not cookies and are not sent to any server of this site:
guics:lidos(localStorage): the texts you opened in this browser, so the “unread” tag can be removed from the home page cards.guicsWipe(sessionStorage): short-lived state for the page-transition animation.
How to clear this data is explained in the cookie policy.
Share buttons
The WhatsApp, X and LinkedIn buttons on the texts and on the assessment results are plain links: they only open those services when you click, carrying the page address (and, for the assessments, a short sentence with the result, without any of your data). The site does not load any code from those companies. What they collect from then on is covered by their own policies.
Admin area
The /admin address is the author’s private area, outside the public site and search engines. It is where the controller views and manages the assessments received, under the conditions described above.
Your rights
Under the LGPD, you can ask for confirmation that your data is processed, access to it, correction of incomplete, inaccurate or outdated data, anonymization, blocking or deletion of unnecessary data or data processed in breach of the law, portability, deletion of data processed on the basis of consent, information about who it is shared with and about the option of not consenting and its consequences (without consent, the assessment is not saved and no result is shown), withdrawal of consent, and you can object to processing.
To exercise these rights, use the contact page. Data that exists only in your browser you can delete yourself by clearing the site’s data in your browser settings.
You can also file a complaint with Brazil’s National Data Protection Authority (ANPD).
Changes to this policy
If this policy changes, the date at the top of the page is updated.