Privacy Policy

Plain language, because there is little to hide: this site sets no cookies, runs no trackers, and sends your requests to no third party. Here is exactly what we process and why.

Who we are

Foral (foral.dev) is a developer-tool product in pre-launch, built in Brazil by its founding team. For anything in this policy: [email protected].

What this covers

This policy covers visitors of foral.dev only. When the product launches, data processed on behalf of customers will be governed by its own, separate data policy — the way it should be.

What we process

Aggregate, cookieless audience metrics: page viewed, referrer, country/region, device class. Your IP address is processed transiently by our infrastructure provider to derive these aggregates and is not stored by us.

Emails you choose to send us: your address, the name you sign with, and the content of your message.

Nothing else. No accounts, no forms, no cookies, no fingerprinting.

Why, and on what legal basis

Audience measurement — legitimate interest (LGPD art. 7 IX; GDPR art. 6(1)(f)): knowing, in aggregate, whether this page is being found.

Replying to your email — steps taken at your request (LGPD art. 7 V; GDPR art. 6(1)(b)) and legitimate interest.

A future wait-list will run on explicit consent, asked at the form itself — never by moving your contact email onto a list.

Cookies

This site sets no cookies. None — not even “essential” ones. That is why you see no cookie banner: there is nothing to consent to.

Who we share with

Nobody buys, rents or receives your data for their purposes. Our processors: Cloudflare, Inc. (hosting, CDN, email routing and cookieless aggregate analytics) and Google (mailbox provider where your email lands). We do not run ads or advertising pixels.

International transfers

This site is served from a global edge network; email may be processed outside your country. Our providers operate under their published data-processing agreements and safeguards.

Retention

Contact emails: kept while we correspond and up to 24 months after the last exchange, then deleted, unless we have an ongoing relationship or a legal duty. Aggregate metrics contain no personal data and may be kept indefinitely.

Your rights

Under the LGPD (art. 18) and the GDPR you can ask for access, correction, deletion, objection, and can withdraw any consent, free of charge: [email protected]. You may also complain to the ANPD (Brazil) or your local data-protection authority.

Changes

The effective date sits at the top. Material changes will be noted on this page.