Privacy Policy

Last updated: November 2026.

Who we are

BassoHub is a news, technology, free tools and open data website. For the purposes of Brazil's LGPD (Law No. 13,709/2018), BassoHub is the controller of the personal data processed on the site. For any privacy matter, contact us through the channels listed in the footer.

What data we collect

Reader account (optional). If you create an account, we store your name, email, preferred language and your password — only as a hash, a scrambled version that cannot be turned back into the original password. If you use "Sign in with Google", we receive and store your name, your email and your Google account identifier. We never receive your Google password.

Newsletter (optional). Your email, language, the topics you chose and where you signed up (for example, the footer or your account page).

Ads. Ad impressions and clicks are recorded only as aggregated daily counters per ad and per ad space, with no personal data.

Technical logs. As with any website, our hosting provider keeps access logs — such as IP address, date and time and your browser identifier (user agent) — for security and to keep the service running.

Recently used tools (in your browser only). To show the "Recently used" shortcut on the tools page and the home page, the site stores in your browser's local storage (localStorage) only the identifier of the last 6 tools you opened, such as qr-code-generator. This list is not a cookie, is never sent to BassoHub and is not linked to your account: it exists only on this device and in this browser. To delete it, use the "Clear history" button next to the list or clear the site data in your browser settings. In private browsing it disappears when you close the window.

What we don't collect. We currently don't use any analytics (audience measurement) tool. The data shown in charts and dashboards comes from official public sources, such as Brazil's Central Bank, and is not personal data.

Why we use it and on what legal basis

• Creating and maintaining your account, letting you sign in and recover your password: performance of a contract (the Terms of Use you accept when signing up).
• Transactional emails — account verification, password reset and newsletter confirmation: performance of a contract and procedures you requested.
• Sending the newsletter on the topics you chose: consent, which you can withdraw at any time.
• Security, fraud and abuse prevention and access logs: legitimate interest and, where applicable, compliance with legal obligations, such as log retention under Brazil's Internet Civil Framework (Law No. 12,965/2014).
• Personalized Google ads: consent, given by choosing "Accept all" in the cookie notice.

Who we share it with

We rely on service providers (processors) that handle data on our behalf, only to provide the service:

• Vercel (United States): website hosting and technical access logs.
• Supabase (servers in the United States, AWS region us-east-2): database and image storage.
• Google: sending transactional emails through Gmail's SMTP service; Sign in with Google, if you choose to use it; and Google AdSense, which may show ads on the site (see the cookies section).

We do not sell personal data. We may share data when required by law or by order of a competent authority.

International transfers

Because these providers are in the United States, your data is stored and processed outside Brazil. The transfer is necessary to provide the service you use and takes place with companies that adopt contractual and technical safeguards, under the cases allowed by Article 33 of the LGPD.

Cookies and advertising

We use essential cookies (to keep you signed in and remember your cookie choice) and, when Google ads are enabled, third-party advertising cookies. Details are in our Cookie Policy, linked in the footer.

Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on those visits. Here, personalized ads are only shown if you choose "Accept all". You can opt out of personalized advertising in Google Ads Settings and learn more at How Google uses information from partner sites.

How long we keep it

• Account: for as long as it is active. If you ask for deletion, we erase your personal data except what we must keep by law.
• Newsletter: until you unsubscribe.
• Technical logs: for the period set by the hosting provider and, where applicable, the minimum required by law.
• Ad counters: they are aggregated and identify no one.

Your rights

The LGPD gives you, among others, the right to:

• confirm whether we process your data and access it;
• correct incomplete, inaccurate or outdated data;
• request anonymization, blocking or deletion of unnecessary data or data processed unlawfully;
• request data portability;
• request deletion of data processed based on your consent;
• know who we share your data with;
• be informed about the possibility of not giving consent and its consequences;
• withdraw consent.

You can handle part of this yourself on your account page: edit your name and language, turn the newsletter on or off and choose topics. For anything else, such as deleting your account, contact us through the channels listed in the footer. You may also file a complaint with Brazil's National Data Protection Authority (ANPD).

Security

Passwords are stored only as hashes, all connections use HTTPS, the session cookie cannot be read by page scripts and database access uses minimal permissions. No system is completely secure: if an incident may cause significant risk, we will notify affected users and the ANPD as required by law.

Children and teenagers

The site is meant for a general audience and is not directed at children. We don't knowingly collect children's data; if you are a parent or guardian and believe this happened, contact us so we can remove it.

Changes

We may update this policy. The date at the top shows the current version, and significant changes will be announced on the site or by email to account holders.