1. Introduction and Data Controller
This Privacy Policy explains in a transparent manner how your data is collected, used, and protected when visiting the technical blog davicruz.com, owned and operated by Davi Cruz ("Data Controller"), reachable at eu@davicruz.com.
This site exists solely for educational publication and research in Security Operations, Threat Intelligence, Penetration Testing, and Data Science. We do not sell or monetize personal data under any circumstances.
2. Applicable Legal Frameworks
Our privacy and architecture practices adhere strictly to:
- GDPR (EU Regulation 2016/679): European General Data Protection Regulation.
- LGPD (Brazilian Law 13,709/2018): Lei Geral de Proteção de Dados.
- CCPA / CPRA (California, USA): Explicit honor and enforcement of the Global Privacy Control (GPC) signal.
3. Data Collected & Purposes
A. Technical Server Logs
When you browse this site, the host or CDN may record standard web request headers, including masked IP addresses, timestamps, and browser User-Agent strings.
Legal Basis: Legitimate Interest (GDPR Art. 6(1)(f) and LGPD Art. 7(IX)) exclusively to secure the infrastructure, prevent abuse, and mitigate DDoS attacks.
B. Audience Analytics (Google Analytics 4 via Google Tag Manager)
We use Google Analytics 4 to understand aggregate reader trends, popular write-ups, and device viewports. We run Google Consent Mode v2, which ensures:
- No persistent analytics cookies are placed before affirmative user consent.
- IP addresses are automatically truncated and anonymized by Google.
- Data retention is bounded at 14 months.
Legal Basis: Explicit Consent (GDPR Art. 6(1)(a) and LGPD Art. 7(I)).
C. Session Recording & Heatmaps (Microsoft Clarity)
We may use Microsoft Clarity to analyze scroll depth and user interaction with code walkthroughs.
In accordance with EU and Brazilian requirements, Microsoft Clarity is blocked by default and will never execute unless you affirmatively click "Accept all". Furthermore, Strict Masking is turned on so that text inputs and sensitive content are never captured.
Legal Basis: Explicit Consent (GDPR Art. 6(1)(a)).
4. Cookie Inventory
| Cookie / Storage Key | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
theme | davicruz.com (Local) | Saves Dark/Light visual color scheme. | Persistent | Essential |
davi_privacy_consent | davicruz.com (Local) | Records your analytics consent selection. | 12 months | Essential |
_ga, _ga_* | Google LLC | Aggregated page performance and anonymous session stats. | 14 months | Analytics (Opt-in) |
_clck, _clsk | Microsoft Corp | Session replay telemetry and click heatmap aggregation. | 1 year / 24h | Analytics (Opt-in) |
5. Your Rights as a Data Subject
You have full statutory rights over your personal data under GDPR, LGPD, and California regulations, including:
- Right of Access & Portability: Obtain confirmation on whether data is processed.
- Right to Withdraw Consent: Revoke consent easily at any time using the preferences button above or in the site footer.
- Global Privacy Control: If your browser broadcasts
Sec-GPC: 1, our site immediately respects it and defaults to all telemetry off.
6. Contact the Controller
For privacy inquiries or to exercise your rights, please reach out directly:
Email: eu@davicruz.com
Controller: Davi Cruz