Last updated: 29 May 2026

Rhyd Media operates rhyd.media (the "site") and its associated newsletter and podcast feeds. This policy describes what we collect, why, and what your rights are. It is written to comply with Brazil's Lei Geral de Proteção de Dados (LGPD) and to respect equivalent protections in other jurisdictions (GDPR, UK GDPR, CCPA, and Australian Privacy Principles among them).

We are an editorial publication. We collect the minimum personal data needed to operate the publication and the newsletter, and we do not sell personal data, run targeted advertising, or share personal data with third parties for marketing purposes.

1. What we collect

When you visit the site. Our server records standard request logs: IP address, user-agent string, referring URL, requested URL, timestamp, and response status. These logs are used for security, abuse prevention, debugging, and aggregate traffic analysis. They are retained for no longer than 90 days unless required for investigation of a specific security incident.

Analytics. We use privacy-respecting, cookieless analytics to understand which content readers find useful. The analytics tool we use does not set cookies, does not track individual users across sessions, does not build advertising profiles, and does not share data with third parties. The data we receive is aggregate (page views, referrers, country-level location) and not tied to identifiable individuals.

When you subscribe to the newsletter. We collect the email address you provide and a record of your subscription confirmation ("double opt-in"). We store this information to send you the newsletter and to maintain a record of consent. We do not require any other personal information to subscribe.

When you contact us. If you email us, we receive whatever you choose to send (typically your email address, your name if you provide it, and the content of your message). We use this to respond to you and to maintain records of correspondence where relevant. We do not add email correspondents to the newsletter list without separate consent.

Podcast. Podcast audio is served through a content delivery network that receives standard request information (IP address, user-agent) in the course of delivering the file. We do not receive listener-level analytics from podcast apps; aggregate download statistics may be available through the podcast host.

2. What we don't collect

We do not collect, store, or process: payment information (we don't charge anyone), advertising identifiers, social-media profiles, location data beyond country-level analytics, biometric data, or any "special category" data as defined under LGPD or GDPR. We do not knowingly collect personal data from children under 13.

3. Cookies

We do not use cookies for tracking, advertising, or analytics. The site may use strictly necessary technical cookies for functions such as remembering your preferences (light/dark mode, for example) or session management. These are not used for tracking and are not shared with third parties.

4. Legal basis for processing (LGPD / GDPR readers)

  • Newsletter subscription: your explicit consent (LGPD Art. 7, I; GDPR Art. 6(1)(a)).
  • Server logs and security: our legitimate interest in operating a secure publication (LGPD Art. 7, IX; GDPR Art. 6(1)(f)).
  • Email correspondence: processing necessary to respond to your request (LGPD Art. 7, V; GDPR Art. 6(1)(b)).

5. Sharing

We do not sell, rent, or trade personal data. We share data only with:

  • Service providers strictly necessary to operate the publication — our email-sending provider, our content delivery network, our podcast host, and our analytics provider. These providers are bound by their own privacy obligations and act only on our instructions.
  • Legal authorities if required by law (court order, formal request from a competent authority).

We do not share personal data with advertisers, data brokers, or third-party marketers.

6. Your rights

Under LGPD, GDPR, and equivalent frameworks, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete personal data.
  • Delete your personal data (subject to legal retention requirements).
  • Object to processing or restrict processing in certain circumstances.
  • Withdraw consent at any time (without affecting prior lawful processing).
  • Lodge a complaint with the relevant data protection authority — in Brazil, the Autoridade Nacional de Proteção de Dados (ANPD); elsewhere, your local equivalent.

To exercise any of these rights, contact us at privacy@rhyd.media. We will respond within the timeframe required by applicable law (typically 15 days under LGPD, 30 days under GDPR).

To unsubscribe from the newsletter, use the unsubscribe link at the bottom of any email. Unsubscribing is immediate and requires no further action.

7. Data retention

  • Newsletter subscribers: retained until you unsubscribe, plus a short period (up to 90 days) to prevent re-subscription errors.
  • Server logs: up to 90 days.
  • Email correspondence: retained for as long as necessary to respond and to maintain records of significant correspondence, then deleted.
  • Analytics: aggregate data may be retained indefinitely; individual-session data is not collected.

8. International transfers

Our service providers may store and process data outside Brazil (for example, the email-sending provider's servers may be in the United States or the EU). Where applicable, these transfers are made under appropriate safeguards, including the standard contractual clauses adopted by the relevant authority.

9. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, or destruction. No system is perfectly secure, however, and we cannot guarantee absolute security. If a data breach occurs that is likely to affect your rights, we will notify you and the relevant authority as required by applicable law.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced on the site and the "Last updated" date will be revised. We will not retroactively reduce your rights without obtaining your consent.

11. Contact

Privacy questions, rights requests, complaints: privacy@rhyd.media.

Data Protection Officer (LGPD): our appointed Data Protection Officer — same address.

General questions: hello@rhyd.media.