Johnny TominagaBack

Privacy

Privacypolicy

How this site handles your information, in plain terms. It is a personal site with one form on it, so there is not much to describe. Nothing is collected for advertising, profiling, or resale.

Last updated

Who is responsible

This site is run by Johnny Tominaga, based in São Paulo, Brazil. If you have a question about your information, or want it corrected or deleted, write to johnny@tominaga.com.br and it comes straight to me.

What the contact form collects

When you send a message, the form stores exactly what you typed and nothing more:

  • Your email address, which is required so I can reply.
  • Your name, company, and what the enquiry is about, all optional.
  • Your message.
  • The browser user-agent string your device sends, which helps me tell a real enquiry from an automated one.
  • The date and time you sent it.

What it does not collect

There are no analytics on this site, no advertising or tracking pixels, and no cookies set to follow you between visits or between sites. Your IP address is not stored. It is passed once to the spam check described below and never written down.

Why, and for how long

Your message is used for one purpose: to read it and reply to it. It is kept while the conversation is useful and deleted when it is not. As a rule that means within two years of our last exchange, and sooner if you ask.

I will not add you to a mailing list, and I will not share, sell, or trade your details.

Who processes it on my behalf

Sending a message involves a small number of service providers, each doing one job. They process your information only to provide that service, and some of them operate outside Brazil, so sending a message may involve transferring your information internationally.

  • Turso stores the message in a hosted database.
  • Resend delivers the notification to me and the confirmation copy to you.
  • Cloudflare runs the spam check described below.
  • Vercel hosts the site and keeps short-lived server logs.

Spam prevention

The contact form is protected by Cloudflare Turnstile, which confirms you are a person rather than a script. It runs invisibly, so in almost every case you will never see it or have to do anything.

To do that, Turnstile collects information about your device and how it interacts with the page, and Cloudflare processes that information on my behalf. It is used only to tell people from bots, never to build an advertising profile of you. Cloudflare describes exactly what it collects and why in its Turnstile Privacy Addendum:

Cloudflare Turnstile Privacy Addendum

Your rights

Under Brazil's LGPD, and under the GDPR if you are writing from the EU or the UK, you can ask me to confirm what information I hold about you, to correct it, to give you a copy, or to delete it. You can also object to how it is being handled or withdraw your consent.

Write to johnny@tominaga.com.br. I handle these myself, so there is no ticket queue: expect a reply within 30 days and usually much sooner. If you are not satisfied with how I have handled it, you can complain to Brazil's data protection authority, the ANPD, or to your local supervisory authority.

Changes

If this policy changes, the date at the top of this page changes with it. There is no separate archive. The version you are reading is the one in force.

Questions about any of this go to johnny@tominaga.com.br.