Legal · OmniGet
Privacy Policy
Last updated: 2026-04-29 · Compliant with LGPD (Brazil, Lei nº 13.709/2018) and GDPR (EU, Regulation 2016/679).
1. Data Controller
OmniGet (accessible at omniget.dev) is a personal, non-commercial open-source project. The data controller within the meaning of Article 5(VI) LGPD and Article 4(7) GDPR is reachable at the email address below, which is the official channel for any request related to your data.
- Contact: tonhowtf@gmail.com
2. Data Collected
2.1 Server logs (technical)
The hosting provider automatically collects, for security and abuse prevention:
- IP address
- HTTP headers (User-Agent, Accept-Language, Referer)
- Request timestamp
These data are retained for a limited time according to the hosting provider's own policy.
2.2 Functional cookies
omniget_lang— stores your preferred language (e.g.en,fr,pt). Set when you choose a language manually or when the browser sends anAccept-Languageheader. Lifetime: 1 year. Strictly necessary for the i18n feature, no consent required (Art. 7(VI) LGPD / Art. 6(1)(f) GDPR).
2.3 Analytics
We use Vercel Analytics and Vercel Speed Insights to measure traffic and page performance. Vercel processes IP-derived identifiers as anonymous and does not use cookies for tracking on this service.
See Vercel's privacy policy.
2.4 Data NOT collected
No advertising tracking, no fingerprinting, no behavioral profiling, no third-party social media embeds. We do not sell or rent any data.
3. Purposes and Legal Bases
| Processing | Purpose | Legal basis |
|---|---|---|
| Server logs (IP, UA) | Security, abuse prevention | Legitimate interest (Art. 7(IX) LGPD, Art. 6(1)(f) GDPR) |
| Aggregated analytics | Audience measurement, performance | Legitimate interest (Art. 6(1)(f) GDPR) |
omniget_lang cookie | Display the site in your language | Performance of the service (Art. 7(V) LGPD, Art. 6(1)(b) GDPR) |
No automated decision-making producing legal effects is performed about you.
4. Recipients and International Transfers
4.1 Hosting
The site is hosted by Vercel Inc. (USA). Transfers to the United States are covered by the EU-US Data Privacy Framework for EU visitors and by Vercel's Standard Contractual Clauses for international transfers (LGPD Art. 33).
4.2 CDN
One image (the app screenshot) is served from Sirv (Sirv Ltd., UK). When your browser loads the homepage, Sirv's CDN sees your IP for the duration of that single request. See Sirv's privacy policy.
4.3 Fonts
All fonts are self-hosted on the same origin as the site. No connection is made to Google Fonts or any other third-party font provider.
5. Retention
| Data | Retention |
|---|---|
| Server logs (IP, UA) | Per the hosting provider's policy (typically < 30 days) |
| Aggregated analytics | Per the provider's retention (max 12 months) |
omniget_lang cookie | 1 year, or until you clear browser storage |
6. Your Rights
You have the following rights under the LGPD and the GDPR:
- Confirmation and access (Art. 18(I)/(II) LGPD, Art. 15 GDPR) — obtain a copy of your data
- Correction (Art. 18(III) LGPD, Art. 16 GDPR) — fix inaccurate data
- Anonymization, blocking or deletion (Art. 18(IV) LGPD, Art. 17 GDPR) — request deletion of unnecessary data
- Portability (Art. 18(V) LGPD, Art. 20 GDPR) — receive your data in a structured format
- Information about sharing (Art. 18(VII) LGPD) — know with whom your data has been shared
- Objection (Art. 18(§2°) LGPD, Art. 21 GDPR) — object to processing based on legitimate interest
- Restriction (Art. 18 GDPR) — request restriction of processing
Exercise your rights by emailing tonhowtf@gmail.com (response within 15 days under LGPD, 30 days under GDPR). If you disagree with the response:
- Brazil: Autoridade Nacional de Proteção de Dados (ANPD)
- EU: the supervisory authority of your country of residence
7. Security
Technical and organizational measures aligned with Article 46 LGPD and Article 32 GDPR:
- Encryption in transit: HTTPS/TLS everywhere, HSTS preload (max-age 1 year, includeSubdomains)
- Strict Content Security Policy with violation reporting
- Secure headers: X-Content-Type-Options, X-Frame-Options DENY, strict Referrer-Policy, restrictive Permissions-Policy
- No third-party tracking scripts beyond Vercel's first-party analytics
8. Minors
The service is open to all but is not specifically directed to persons under 16. We do not knowingly collect data from children. If you believe a minor's data has been collected, please contact us so we can delete it (Art. 14 LGPD, Art. 8 GDPR).
9. Changes
This policy may be updated. The last update date appears at the top of this page. Material changes will be highlighted on the homepage for at least 14 days.
10. Contact
For any question, access request, or complaint: tonhowtf@gmail.com