Privacy Policy

1. Introduction

Silgalax (“we”, “us”, “our”) is a small web design and development studio operated by Samuel Dutra, based in Brazil and working with clients worldwide. This Privacy Policy explains what personal data we collect when you visit silgalax.com, why we collect it, how we use it, and the rights you have over it.

We are the data controller responsible for your personal data. This policy is written to comply with the EU General Data Protection Regulation (GDPR) and Brazil’s Lei Geral de Proteção de Dados (LGPD). If you have any questions about it, you can reach us at silgalaxstudio@gmail.com.

2. Information we collect

We only collect what we need to answer your enquiries and to understand how the site is used. Depending on how you interact with it, this may include:

Information you provide. When you submit the contact form, we collect your name, email address, the service you select and the message you write (see section 4).

Analytics data. If you give your consent, Google Analytics 4 and Microsoft Clarity collect pseudonymous usage data — such as the pages you view, your approximate location (country or region), your device and browser type, and how you interact with the page (see section 3).

Technical & server data. This site is hosted on Cloudflare Pages. Like any web host, Cloudflare automatically processes limited technical data — such as your IP address and browser user-agent — in its server logs in order to deliver the site and protect it against abuse. This is necessary for us to provide and secure the website (our legitimate interest).

We do not sell your personal data, and we do not use it for automated decision-making or profiling.

3. Analytics tools

This site uses Google Analytics 4 (GA4) and Microsoft Clarity to understand how visitors use it. These tools are only activated after you give your consent via the cookie banner.

Google Analytics 4 collects pseudonymous data about your visit — pages viewed, approximate location (derived from a truncated IP address, not stored), device and browser type, referral source and on-page interactions — to produce aggregate statistics. It is provided by Google and governed by Google’s Privacy Policy.

Microsoft Clarity records anonymised usage patterns — such as clicks, scrolling and heatmaps — to show us how pages are actually used. It is provided by Microsoft and governed by the Microsoft Privacy Statement. The legal basis for both tools is your consent, which you can withdraw at any time (see section 5).

4. Contact form & spam protection

When you submit the contact form, the details you provide (your name, email address, selected service and message) are processed on our behalf by Formspree and delivered to us by email so we can reply to your enquiry. The legal basis is our legitimate interest in responding to your request.

We keep the messages you send us only as long as needed to handle your enquiry, and for up to 12 months afterwards, after which they are deleted.

To protect the form from spam and automated abuse, it uses Google reCAPTCHA. reCAPTCHA collects information about your device and behaviour on the page and sends it to Google for analysis. This processing is necessary for the security of the form (our legitimate interest) and is governed by Google's Privacy Policy and Terms of Service.

5. Cookies

A cookie is a small text file a website stores on your device. This site does not set any advertising or cross-site tracking cookies.

Essential. We store your cookie choice (accept or decline) locally in your browser so we don’t have to ask again on every visit. This is strictly necessary and is set without requiring consent.

Analytics. Only if you click “Accept” on the cookie banner do Google Analytics 4 and Microsoft Clarity set cookies and similar identifiers to measure usage. If you click “Decline”, they are never set.

Spam protection. On the contact page, Google reCAPTCHA may set cookies it needs to tell humans apart from bots and protect the form (see section 4).

You can withdraw your analytics consent at any time by declining when asked, or by clearing this site’s cookies and local storage in your browser. You can also block or delete cookies through your browser settings.

6. Your rights

Under the GDPR and the LGPD you have rights over your personal data. You can ask us to:

Access — receive a copy of the personal data we hold about you. Rectify — correct data that is inaccurate or incomplete. Erase — delete your data (the “right to be forgotten”). Restrict or object — limit or object to how we process it, including withdrawing your consent for analytics at any time. Portability — receive your data in a portable, machine-readable format.

To exercise any of these rights, email us at silgalaxstudio@gmail.com and we will respond within the timeframe required by law (30 days under the GDPR). You also have the right to lodge a complaint with your local data protection authority — in the EU, your national supervisory authority; in Brazil, the Autoridade Nacional de Proteção de Dados (ANPD).

7. Contact

For questions about this policy, contact: silgalaxstudio@gmail.com