Privacy policy

Last updated 24 August 2026. This policy describes what Affterwords collects, why, for how long, and how a reader exercises their rights.

Who is responsible

Affterwords is the controller of the personal data described here. It operates from Brazil as an independent publication. All privacy correspondence is handled by email at support@affterwords.site. No postal address is maintained.

What is collected

Server and analytics data. IP address, browser and device type, referring page, pages viewed and timestamps. IP addresses are truncated before storage where the analytics provider supports it.
Email address and message content, when someone writes in, together with anything included in that message.
Mailing list data, where a reader subscribes: email address, subscription date, and records of opens and clicks.
Order data, where a purchase is made: name, email address, country, and the transaction reference supplied by the payment processor.

Payment card details are never received, seen or stored by Affterwords. Card data is handled entirely by the payment processor on its own systems.

Affterwords does not knowingly collect data from anyone under 18. Where such data is identified, it is deleted.

Legal basis

Contract (LGPD Art. 7, V; GDPR Art. 6(1)(b)) for order processing, delivery and refunds.
Consent (LGPD Art. 7, I; GDPR Art. 6(1)(a)) for marketing email and for non-essential cookies. Consent is withdrawable at any time.
Legitimate interests (LGPD Art. 7, IX; GDPR Art. 6(1)(f)) for aggregate analytics, fraud prevention and site integrity, balanced against the rights of the reader.
Legal obligation (LGPD Art. 7, II; GDPR Art. 6(1)(c)) for tax and accounting records.

Retention

Analytics data: up to 14 months, then deleted or aggregated beyond identification.
Email correspondence: 24 months from the last message in the thread.
Mailing list data: until the reader unsubscribes, then a suppression record only, kept so that the address is not re-added.
Order records: five years, as required by Brazilian tax and consumer law.

Sharing

Data is shared only with processors that make the site work: hosting and content delivery, email delivery, analytics, and payment processing. Each acts on documented instructions and is bound by a data processing agreement. Affterwords does not sell personal data and does not share it with data brokers.

Data may also be disclosed where a valid legal order requires it.

International transfers

Processors used by Affterwords operate servers outside Brazil, including in the United States and the European Union. Transfers of personal data from the European Economic Area and the United Kingdom rely on Standard Contractual Clauses or an adequacy decision. Transfers under the LGPD rely on the mechanisms permitted in Art. 33, including contractual clauses containing the safeguards required by that law.

Cookies

Affterwords sets no advertising cookies of its own. The site uses a small number of cookies for basic operation and, where consent has been given, for analytics and for measuring the performance of advertising placed on third-party platforms. Non-essential cookies are set only after consent, and consent can be withdrawn at any time through the browser or by writing in.

Browser controls allow all cookies to be blocked or deleted. Blocking essential cookies may prevent parts of the site from working.

Rights

Under the LGPD (Art. 18) a data subject may confirm processing, access their data, correct incomplete or outdated data, request anonymisation, blocking or deletion of unnecessary or excessive data, request portability, request deletion of data processed with consent, obtain information about sharing, be informed about the consequences of refusing consent, and withdraw consent.

Under the GDPR a data subject has rights of access, rectification, erasure, restriction, portability and objection, including objection to processing based on legitimate interests, and the right not to be subject to solely automated decisions with legal or similarly significant effects. No such automated decision-making takes place here.

Requests are made by email to support@affterwords.site with the word data in the subject line, and are answered within 15 days under the LGPD and within one month under the GDPR. Verification of identity may be requested where the account of a third party could otherwise be exposed.

Complaints

A reader who is unsatisfied with the response may complain to the Autoridade Nacional de Proteção de Dados (ANPD) in Brazil, or to the supervisory authority of their member state in the European Economic Area, or to the Information Commissioner's Office in the United Kingdom.

Changes

Material changes to this policy are published on this page with the date at the top revised. Where a change affects processing carried out on the basis of consent, fresh consent is sought.