Privacy Policy

The data controller is the operator of this website. Contact for any privacy question or request: hello@internetmademedoit.com.

• Contributions — amount, currency, date, country of the payment method, and the email address the payment provider gives us (to send your receipt and handle refunds). Legal basis: performance of the contribution and legal obligations (accounting, tax). Kept for 10 years as required by Portuguese accounting law.
• Crypto — if you pay in crypto, the transaction (amount, wallet addresses) is public on the blockchain by design; we record the transaction hash, network, amount, the sending address (already public on-chain) and the optional nickname/message you type, to verify the payment and prevent the same transaction from being counted twice.
• Wall of Fame — the nickname, message, colour and (optional) country you choose to publish. Basis: your consent. Edit or delete it any time.
• Email updates — your email, language, and proof of your consent (time and confirmation). Basis: consent (double opt-in). Kept until you unsubscribe; after that we keep only a suppression record so we never email you again.
• Pass the brick — a random brick code, the code you received it from, your country, and an optional nickname. No contacts, no phone numbers.
• Anonymous statistics — pages viewed, share buttons clicked, country (from the network, not GPS), referral channel. We use a random first-party identifier that is hashed; we do not store IP addresses in analytics. Basis: legitimate interest in knowing what works, with minimal data.
• Security — IP addresses are processed briefly in memory to prevent abuse (rate limiting) and are not stored.
• Social media — when you comment on the project's Instagram, Facebook or TikTok, we process your public username and comment to read and reply to it.

We use only first-party storage: your language/currency choice, your brick code, a session cookie for admins, and an anonymous analytics identifier. No advertising or third-party tracking cookies.

• Ko-fi, PayPal and Stripe (payments) — EU/US/UK
• Resend (sending emails) — US
• Our hosting and database provider, and Cloudflare (domain, security) — EU/US
• Anthropic (AI used to draft social media content and replies to public comments; no payment data is sent) — US
• Meta and TikTok, only for the content we publish on our own accounts

Transfers outside the EU rely on the EU-US Data Privacy Framework or Standard Contractual Clauses. We never sell or rent personal data.

You can ask to access, correct, delete or export your data, object to processing, or withdraw consent at any time by emailing hello@internetmademedoit.com. We reply within 30 days. You can also complain to the Portuguese data protection authority, CNPD (cnpd.pt), or the authority in your country.

Contributions and email updates are for people aged 18+. We do not knowingly collect data from children.

If this policy changes, the date at the top changes too, and significant changes are announced on the website and to subscribers.