Legal · OmniGet

Privacy Policy

Last updated: 2026-04-29 · Compliant with LGPD (Brazil, Lei nº 13.709/2018) and GDPR (EU, Regulation 2016/679).

1. Data Controller

OmniGet (accessible at omniget.dev) is a personal, non-commercial open-source project. The data controller within the meaning of Article 5(VI) LGPD and Article 4(7) GDPR is reachable at the email address below, which is the official channel for any request related to your data.

2. Data Collected

2.1 Server logs (technical)

The hosting provider automatically collects, for security and abuse prevention:

  • IP address
  • HTTP headers (User-Agent, Accept-Language, Referer)
  • Request timestamp

These data are retained for a limited time according to the hosting provider's own policy.

2.2 Functional cookies

  • omniget_lang — stores your preferred language (e.g. en, fr, pt). Set when you choose a language manually or when the browser sends an Accept-Language header. Lifetime: 1 year. Strictly necessary for the i18n feature, no consent required (Art. 7(VI) LGPD / Art. 6(1)(f) GDPR).

2.3 Analytics

We use Vercel Analytics and Vercel Speed Insights to measure traffic and page performance. Vercel processes IP-derived identifiers as anonymous and does not use cookies for tracking on this service.
See Vercel's privacy policy.

2.4 Data NOT collected

No advertising tracking, no fingerprinting, no behavioral profiling, no third-party social media embeds. We do not sell or rent any data.

3. Purposes and Legal Bases

ProcessingPurposeLegal basis
Server logs (IP, UA)Security, abuse preventionLegitimate interest (Art. 7(IX) LGPD, Art. 6(1)(f) GDPR)
Aggregated analyticsAudience measurement, performanceLegitimate interest (Art. 6(1)(f) GDPR)
omniget_lang cookieDisplay the site in your languagePerformance of the service (Art. 7(V) LGPD, Art. 6(1)(b) GDPR)

No automated decision-making producing legal effects is performed about you.

4. Recipients and International Transfers

4.1 Hosting

The site is hosted by Vercel Inc. (USA). Transfers to the United States are covered by the EU-US Data Privacy Framework for EU visitors and by Vercel's Standard Contractual Clauses for international transfers (LGPD Art. 33).

4.2 CDN

One image (the app screenshot) is served from Sirv (Sirv Ltd., UK). When your browser loads the homepage, Sirv's CDN sees your IP for the duration of that single request. See Sirv's privacy policy.

4.3 Fonts

All fonts are self-hosted on the same origin as the site. No connection is made to Google Fonts or any other third-party font provider.

5. Retention

DataRetention
Server logs (IP, UA)Per the hosting provider's policy (typically < 30 days)
Aggregated analyticsPer the provider's retention (max 12 months)
omniget_lang cookie1 year, or until you clear browser storage

6. Your Rights

You have the following rights under the LGPD and the GDPR:

  • Confirmation and access (Art. 18(I)/(II) LGPD, Art. 15 GDPR) — obtain a copy of your data
  • Correction (Art. 18(III) LGPD, Art. 16 GDPR) — fix inaccurate data
  • Anonymization, blocking or deletion (Art. 18(IV) LGPD, Art. 17 GDPR) — request deletion of unnecessary data
  • Portability (Art. 18(V) LGPD, Art. 20 GDPR) — receive your data in a structured format
  • Information about sharing (Art. 18(VII) LGPD) — know with whom your data has been shared
  • Objection (Art. 18(§2°) LGPD, Art. 21 GDPR) — object to processing based on legitimate interest
  • Restriction (Art. 18 GDPR) — request restriction of processing

Exercise your rights by emailing tonhowtf@gmail.com (response within 15 days under LGPD, 30 days under GDPR). If you disagree with the response:

7. Security

Technical and organizational measures aligned with Article 46 LGPD and Article 32 GDPR:

  • Encryption in transit: HTTPS/TLS everywhere, HSTS preload (max-age 1 year, includeSubdomains)
  • Strict Content Security Policy with violation reporting
  • Secure headers: X-Content-Type-Options, X-Frame-Options DENY, strict Referrer-Policy, restrictive Permissions-Policy
  • No third-party tracking scripts beyond Vercel's first-party analytics

8. Minors

The service is open to all but is not specifically directed to persons under 16. We do not knowingly collect data from children. If you believe a minor's data has been collected, please contact us so we can delete it (Art. 14 LGPD, Art. 8 GDPR).

9. Changes

This policy may be updated. The last update date appears at the top of this page. Material changes will be highlighted on the homepage for at least 14 days.

10. Contact

For any question, access request, or complaint: tonhowtf@gmail.com