Privacy notice

Who is responsible

This website is run by Translucid Security. The person responsible for how your data is used (the “controller”) is Thamires Ferreira, in Brazil. Translucid Security is a business in formation and is not yet a registered company.

For any privacy question or request, including to the person in charge of data protection (the “encarregado” under the LGPD), write to info@translucidsecurity.com.

What we collect and why

• Pre-launch list. If you sign up, we store your email address, your phone number, and when and to what you consented. We use them only to send you occasional launch-related information by email and SMS. Legal basis: your consent (GDPR Art. 6(1)(a); LGPD Art. 7, I).
• Private access. If you enter an invitation code, we store a temporary access token for that browser session.
• Protection against abuse. To limit automated requests we process your IP address. It is stored only as a one-way hash inside short-lived counters, never in readable form. Legal basis: our legitimate interest in keeping the site available and secure (GDPR Art. 6(1)(f); LGPD Art. 7, IX).
• Human verification. When you open the signup form, Cloudflare Turnstile checks that the request comes from a person. For that purpose Cloudflare receives technical data about your browser and connection, such as your IP address. Legal basis: the same legitimate interest.

We do not use advertising or analytics trackers, we do not build profiles, and we make no automated decisions about you.

The site keeps your private-access token in your browser’s session storage, which is cleared when you close the tab.

Cloudflare, which hosts the site, may set a strictly necessary security cookie to tell people from automated traffic.

How long we keep it

• Pre-launch list: 12 months after you last gave consent, then deleted automatically. Earlier if you withdraw consent or ask us to delete it.
• Expired access tokens and abuse-protection counters: deleted automatically, normally within two days.
• Technical request logs kept by our hosting provider: up to seven days.

Who receives it

Cloudflare, Inc. hosts the website and its database and provides the human verification, acting on our instructions as our processor (“operador” under the LGPD).

We do not sell personal data or share it for anyone else’s marketing. No email or SMS delivery provider is connected yet; this notice will name it before any message is sent.

Where it is processed

The database is stored in the European Union. Cloudflare operates a global network, so requests may be handled, and limited technical data processed, in other countries, including the United States. Those transfers are covered by Cloudflare’s data processing agreement, which includes standard contractual clauses for international transfers.

Your rights

You can ask us at any time to:

• confirm whether we hold data about you and give you a copy;
• correct data that is wrong or incomplete;
• delete your data;
• restrict or object to its use;
• give you your data in a portable format;
• tell you who we have shared it with;
• withdraw your consent, which does not affect what was done before you withdrew it.

Write to info@translucidsecurity.com, if possible from the email address concerned. We answer within one month, and within 15 days for access requests under the LGPD. Using these rights is free.

You can also complain to a data protection authority: in the EU, the one in the country where you live, such as IMY in Sweden; in Brazil, the Autoridade Nacional de Proteção de Dados (ANPD).

How we protect it

Data is encrypted in transit. Invitation codes and access tokens are stored only as hashes, and the database has no public network address. Access is limited to the people who run the site.

This site is aimed at professionals and is not intended for children.

Changes to this notice

If we change how we use personal data we will update this notice and its date. If a change affects a consent you gave, we will ask you again.