Privacy Policy

1. Scope & Target Audience

This Privacy Policy applies to all individuals who access our publication, read our editorial content, interact with embedded media or digital features, or correspond directly with our team via email across DDDology ("dddology.com", "we," "our," or "us").

Whether you are reading our articles, exploring our topic archives, or contacting our editorial desk, this policy governs how your information is collected, processed, stored, and protected.

2. Data Controller & Data Protection Officer (DPO)

DDDology acts as the Data Controller for all personal data processed through dddology.com. We operate in strict compliance with international data protection frameworks, including the European Union General Data Protection Regulation (GDPR - Regulation EU 2016/679), the Lei Geral de Proteção de Dados (LGPD - Law No. 13,709/2018 in Brazil), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and the Children's Online Privacy Protection Act (COPPA).

To administer privacy requests and oversee data protection governance, we maintain a dedicated Data Protection Officer (DPO). You may contact our Data Protection Officer at any time regarding your rights or privacy queries via email at [email protected].

3. Information We Collect & Exclusions

You are not required to register an account or provide personal information to browse DDDology. We do not operate user registration systems, public comment sections, web-based contact forms, or automated newsletter mailing lists on dddology.com. Specific data is processed only under the following circumstances:

• Direct Email Correspondence: When you voluntarily send an email to our editorial, corrections, or privacy addresses (such as [email protected] or [email protected]), we receive your email address, sender name, and the content of your message solely to respond to your inquiry.
• Automated Technical Data & Server Logs: Our hosting infrastructure and Content Delivery Network (CDN) automatically record standard technical variables upon each HTTP request, including Internet Protocol (IP) addresses (anonymized where mandated by law), browser type and version, device operating system, referring/exit URLs, and request timestamps.
• Browser Local Storage & Functional State: We utilize your browser's native localStorage strictly on your device to remember your visual interface preference (such as dark or light theme mode) and anonymous client-side article reaction states, without transmitting personal identifiers to our servers.

Exclusion of Sensitive Personal Data: We do not knowingly collect, request, or process sensitive personal data (such as information regarding racial or ethnic origin, religious convictions, political opinions, union membership, health data, genetic identifiers, or sexual orientation). Visitors are requested to refrain from submitting sensitive data via email. If we discover inadvertent receipt of sensitive data, it will be immediately erased from our records.

4. Legal Bases for Data Processing

In accordance with GDPR (Article 6) and LGPD (Article 7), our processing of personal data is grounded strictly on legally recognized justifications:

• User Consent (GDPR Art. 6(1)(a) / LGPD Art. 7(I)): Applied when you grant consent for advertising or analytics cookies via our consent management interface, or when you voluntarily initiate email correspondence with our team.
• Contractual & Service Execution (GDPR Art. 6(1)(b) / LGPD Art. 7(V)): Applied when processing is necessary to deliver requested web pages, media embeds, or reader support responses.
• Legal & Regulatory Obligations (GDPR Art. 6(1)(c) / LGPD Art. 7(II)): Applied to fulfill statutory record-keeping, cyber-security log preservation, or formal law enforcement requirements.
• Legitimate Interests (GDPR Art. 6(1)(f) / LGPD Art. 7(IX)): Applied to preserve server stability, prevent security threats (DDoS/fraud), evaluate aggregate readership metrics, and sustain our publication through contextual and programmatic advertising.

5. Google AdSense & Third-Party Advertising Vendors

DDDology partners with Google AdSense and accredited third-party advertising vendor networks to display advertisements on dddology.com. In compliance with Google Publisher Policies, please review how Google and its partners process advertising data:

• Third-party vendors, including Google, use cookies (such as the Google advertising and DoubleClick DART cookies) and web beacons to serve ads based on a user's prior visits to dddology.com or other websites on the Internet.
• Google's use of advertising cookies enables it and its partners to serve personalized or contextual advertisements to our visitors based on their visit to dddology.com and/or other sites across the Internet.
• To learn more about how Google collects and processes data on partner websites, please consult Google's official disclosure: How Google uses information from sites or apps that use our services.

Users may opt out of personalized advertising at any time by visiting Google Ads Settings. Alternatively, you may opt out of third-party vendor cookies for personalized advertising by visiting www.aboutads.info/choices or the Network Advertising Initiative (NAI) Opt-Out Page.

6. Google Analytics 4 (GA4) & Usage Telemetry

To evaluate article engagement, monitor publication stability, and optimize layout performance, dddology.com utilizes Google Analytics 4 (GA4) (loaded via gtag.js), a web analytics service provided by Google LLC.

Google Analytics 4 sets first-party cookies (including _ga and _ga_*) to distinguish unique visitors in aggregate, measure reading duration, and analyze high-level traffic sources. In GA4, IP addresses are anonymized by default prior to storage and aggregate reporting, and we do not merge analytics telemetry with personally identifiable information.

You may prevent your data from being collected and used by Google Analytics at any time by downloading and installing the official Google Analytics Opt-out Browser Add-on or by blocking analytics cookies in your web browser settings.

7. Data Sharing & Third-Party Service Providers

When necessary to operate dddology.com, limited technical data is processed by authorized infrastructure and service providers under strict data protection agreements:

• Cloud Hosting & Content Delivery Networks (Firebase Hosting / Google Cloud CDN): For infrastructure reliability, TLS encryption, and global edge caching.
• Security & Web Application Firewalls (WAF): For threat detection, automated bot filtering, and DDoS mitigation.
• Advertising & Web Analytics Partners (Google LLC): For serving contextual/programmatic advertisements via Google AdSense and measuring aggregate readership via Google Analytics 4.
• Public & Judicial Authorities: When strictly required by statutory law, court subpoenas, or formal regulatory mandates.

8. International Data Transfers

As a digital publication accessible globally, data collected through dddology.com may be stored or processed on servers located in the United States, Brazil, or the European Union.

Whenever international data transfers occur, we ensure appropriate safeguards are enforced in accordance with GDPR (Chapter V) and LGPD (Chapter V), including Standard Contractual Clauses (SCCs), adequacy decisions, and data processing agreements with certified infrastructure partners.

9. Data Retention & Termination of Processing

We retain personal data only for the duration necessary to fulfill the specific purposes for which it was collected, or as required to satisfy statutory, legal, or security reporting obligations.

Processing and storage of personal data terminates when:

1. The original purpose for collecting the data (such as answering an email inquiry) has been fully accomplished;
2. You withdraw your consent or exercise your statutory right to request erasure;
3. Statutory legal or regulatory retention limits expire.

Upon termination, personal records are permanently erased or anonymized, except where temporary retention is legally mandated.

10. Data Subject & Consumer Rights (GDPR, LGPD & CCPA)

Regardless of your geographical location, we respect and facilitate your statutory privacy rights under GDPR, LGPD, and CCPA/CPRA:

• Right to Access & Confirmation: Obtain formal confirmation regarding whether we process your data, along with a copy of processed records.
• Right to Rectification: Request correction of inaccurate, outdated, or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): Request permanent deletion of your personal data from our systems.
• Right to Restrict & Object to Processing: Limit or object to processing based on legitimate interests.
• Right to Data Portability: Receive a copy of your personal data in a structured, commonly used format.
• Right to Opt-Out of Data Sale/Sharing (CCPA/CPRA): We do not sell personal information for monetary consideration; you may opt out of cross-context behavioral advertising cookies via the links in Section 5.
• Right to Withdraw Consent & Non-Discrimination: Revoke consent at any time without incurring service discrimination or quality reduction.

To exercise any of these rights, please send your request to our DPO at [email protected]. We process and fulfill valid requests within statutory timeframes (15 to 30 days).

11. Security & Storage Protocols

We implement technical, administrative, and physical security controls to safeguard data against unauthorized access, loss, or alteration. All web transmissions to and from dddology.com are encrypted using Transport Layer Security (TLS 1.3 / HTTPS).

Access to administrative systems is restricted strictly to authorized personnel using hardware multi-factor authentication (MFA) and role-based access policies.

12. Communication & Anti-Phishing Policy

DDDology does not send unsolicited marketing emails or commercial newsletters. Email correspondence from our domain occurs exclusively in direct response to inquiries initiated by you.

Anti-Phishing Guarantee: DDDology WILL NEVER REQUEST FINANCIAL DATA, CREDIT CARD NUMBERS, CRYPTOCURRENCY SEED PHRASES, OR ACCOUNT PASSWORDS VIA EMAIL OR PHONE. If you receive suspicious communications claiming to be from our publication, please report it immediately to [email protected].

13. Embedded Third-Party Media & External Links

Our articles regularly include contextual hyperlinks to external primary sources, official documentation, academic papers, and third-party repositories. We do not control or accept responsibility for the privacy practices or content of external websites.

Certain articles may also feature embedded multimedia players or social posts—specifically YouTube videos (served via youtube-nocookie.com in Privacy-Enhanced Mode) and X (formerly Twitter) posts (rendered via platform.twitter.com/widgets.js). Interacting with these embedded components may allow the respective third-party provider to read or set cookies and collect usage telemetry in accordance with their own terms and privacy policies:

• YouTube Terms of Service
• Google Privacy Policy
• X (Twitter) Privacy Policy

14. Children's Online Privacy Protection (COPPA)

DDDology is intended for a general adult and professional audience; it is not directed at children under 13 years of age (or under 16 in the European Union).

We do not knowingly collect personal data from children. If a parent or legal guardian believes their child has submitted personal information to our publication via email, please contact us at [email protected], and we will promptly delete such records.

15. Policy Revisions & Contact Information

We reserve the right to update this Privacy Policy periodically to reflect technological updates, legal requirements, or operational changes.