Privacy Policy.
Last updated: November 1, 2026
Who looks after your data
Newoult Interactive operates this website. For privacy questions, information about your data or deletion requests, contact newoult@gmail.com.
Contact and developer access
The contact form collects your name, email, subject and message so our team can review and answer your request. Messages are held in a private inbox. Please avoid sensitive information or other people’s personal data.
To limit spam, we use codes derived from email and IP address to count attempts, together with a temporary form token. These controls are necessary for contact security and do not feed audience statistics.
We answer communications on the basis of our legitimate interest in responding to people who contact us. When your enquiry concerns a potential contract, processing may also be necessary for steps you request before entering a contract. Sending a message does not subscribe you to marketing.
Administration is restricted to authorized developers. Supabase Auth processes email, credentials and session data to authenticate and protect access. There is no public registration.
Statistics, only with your permission
Vercel Web Analytics loads only after you allow statistics. It helps us understand visits in aggregate: pages, referral source, approximate country or region, device, browser and operating system, where available. Available information depends on the browser, referral source and service.
We do not send form messages, credentials or administration pages to analytics. We remove URL query parameters and fragments before submission. We add no individual identification or tracking across websites.
How Analytics works
Vercel states that the service uses no third-party cookies: it distinguishes visits using a request hash, with visitor sessions discarded after 24 hours. The studio receives aggregate reports. The 24-hour period is not a report-deletion deadline.
Reporting windows depend on the Vercel plan: 1 month on Hobby, 12 months on Pro and 24 months on Plus or Enterprise. Vercel says it may store data longer to support plan upgrades. We do not promise deletion at the end of that window.
Preferences and withdrawing consent
Statistics start disabled and require consent. You can accept, reject or customize your choice with equal access to the content. Use “Cookie settings” in the footer to change or withdraw permission at any time.
Withdrawal prevents new analytics submissions; it does not undo earlier processing. We store your choice, notice version and date in your browser for 180 days. An expired, invalid or older-version choice requires a new decision. Clearing browser storage removes the preference too.
Providers and international processing
Vercel delivers and hosts the website and provides optional statistics. Website delivery and security require processing technical request information, such as IP address, requested page and browser information, even when you reject statistics.
Supabase provides the database, authentication and storage of published images. Contact messages are kept in the private database; editorial and profile images published by the studio are public. The project uses the São Paulo region, but providers and their subprocessors may also process information outside Brazil under applicable contracts and notices.
If you choose to write directly to our email address, the email services involved also process your message. External links, including Newoult Holdings’ website, have their own privacy notices.
Retention and security
The contact inbox has a 90-day retention period; expired records are removed through retention maintenance. You may request deletion sooner. If a communication leads to a contract or legal obligation, records necessary for that purpose may be kept separately for the applicable period.
Developer data is kept while authorized access is needed. Theme preferences remain until changed or cleared; the statistics choice is valid for 180 days. Technical logs and any backups follow the providers’ limits and procedures.
Spam counters use one-hour windows. Records older than one day are removed through retention maintenance. The form token is valid for up to one hour and does not create a cookie.
We restrict the contact inbox and administrative operations to authorized access. Security processing relies on the legitimate interest in operating a safe website; these records are not turned into optional statistics.
Your rights
Under applicable law, you may request confirmation and access, correct data, obtain sharing information, request portability, anonymization, restriction or deletion, and withdraw consent. You may also object to unlawful processing and petition Brazil’s National Data Protection Authority (ANPD). Some rights depend on legal conditions and exceptions.
Send requests to newoult@gmail.com. We may ask only for information needed to verify your identity and locate the data. We do not add identification to aggregate reports to try to find an individual visitor. Statistics preferences can also be changed directly in the footer.