Privacy and cookies

How this site handles personal data, which cookies it uses and how you control your choices.

Last updated: September 13, 2026

Who is responsible

This is the personal website of Giuliano Geiss Arnhold, published at giuliano.codes. I am the controller of the personal data described here, under Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018).

For any privacy matter, write to .

Summary

You can read the whole site without creating an account or giving any data.
Audience measurement and advertising cookies are only used with your permission. Declining doesn't stop you from using the site.
I don't sell personal data.
You can change your cookie choice at any time, with the Manage cookies button at the top of this page or the Cookies link in the footer.

What data may be processed and why

Some of the features below are not active yet, but they are described now so this policy remains valid when they are turned on.

Visiting the site

As with any website, the hosting server records technical data about each visit: IP address, date and time, requested page, browser and referring page.

Purpose: keeping the site running, investigating errors and preventing abuse and attacks.
Legal basis: legitimate interest.
Retention: only as long as needed for these purposes.

Audience measurement (Google Analytics 4)

With your permission, the site uses Google Analytics 4, loaded through Google Tag Manager, to understand how the site is used.

Data: pages visited, reading time, where the visit came from, device and browser type, and approximate location (city or region).
Purpose: learning which content is useful and improving the site. Reports are aggregated; I don't identify individual visitors.
Legal basis: consent.

Advertising (Google Ads)

With your permission, the site may use Google Ads tags.

Purpose: measuring the results of campaigns that promote the site and showing more relevant ads on other websites (remarketing).
Legal basis: consent.

The site uses Google's Consent Mode. Everything starts denied, and the tags only set measurement or advertising cookies after you allow them. Without your permission, Google tags may send cookieless signals without identifiers, which Google uses only in aggregate.

Ads from partner companies

The site may display banners for my own company or for partner companies.

How they are shown: banners are images served by the site itself, with no scripts from third-party ad networks.
Measurement: clicks may be measured (with your measurement permission), and links may carry campaign parameters (UTM), which tell the destination site where the visit came from.
Destination sites: when you click, you go to the advertiser's website, which has its own privacy policy.

If you subscribe to the newsletter:

Data: e-mail address, preferred language, and the date, time and IP address of the sign-up and of the confirmation, which serve as a record of your consent.
Purpose: sending new content from the site.
Legal basis: consent. A subscription only takes effect after you confirm it through the link sent to your e-mail.
Unsubscribing: every e-mail includes a link to unsubscribe at any time.
Retention: the data is stored until you unsubscribe. After that, I keep only what is needed to prove the unsubscription.

E-mail contact

If you write to me, I use the data in your message (name, e-mail and whatever you send) only to reply and continue the conversation, for as long as that takes.

YouTube videos

Embedded videos only load after you click them, from the youtube-nocookie.com domain. Before the click, nothing is requested from YouTube. After the click, YouTube (Google) processes data under its own policy.

Site fonts and files

The site's fonts, images and scripts are served by the site itself. Reading the pages makes no requests to external services, except Google Tag Manager and whatever it loads with your permission.

Cookies and browser storage

Necessary (always on)

gga_consent: stores your cookie choice. Duration: 180 days.
gga_lang: remembers the language you chose. Duration: up to 1 year.
gga-color-mode: remembers the theme (light, dark or system). It isn't a cookie: it lives in the browser's local storage until you clear the site's data.

Audience measurement (only with permission)

_ga and _ga_<ID>: Google Analytics cookies that tell visitors and sessions apart. Duration: up to 2 years.

Advertising (only with permission)

_gcl_au: Google Ads cookie that links visits to campaigns. Duration: 90 days.
Cookies on Google domains (such as doubleclick.net): used by Google Ads to measure conversions and personalize ads, with durations set by Google.

How to change your choice

Use the Manage cookies button at the top of this page or the Cookies link in the footer of any page.
You can also delete or block cookies in your browser settings.
For Google's personalized ads in general, use My Ad Center.

Who data is shared with

Google: when you allow measurement or advertising, under Google's privacy policy and the page on how Google uses information from partner sites.
Hosting: the company that hosts the site processes access logs and, once it exists, the newsletter database.
E-mail delivery: once the newsletter exists, a sending service may process your e-mail address only to deliver messages.
Authorities: when required by law or court order.

International transfers

Google may process data on servers outside Brazil, such as in the United States. These transfers follow the mechanisms provided by the LGPD, such as Google's own contractual clauses.

Your rights

Under the LGPD, you can request at any time:

confirmation that I process your data, and access to it;
correction of incomplete, inaccurate or outdated data;
anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
data portability;
information about who the data was shared with;
withdrawal of consent and deletion of the data processed based on it;
objection to processing based on legitimate interest.

To exercise these rights, write to . I reply within the deadlines set by the LGPD. If you are not satisfied, you can contact Brazil's National Data Protection Authority (ANPD).