Privacy Policy

1. Who's responsible

Comprei Nada (compreinada.com) is the controller of the personal data described here, under Brazil's General Data Protection Law (LGPD). For any privacy matter, contact contato@compreinada.com.

2. What we collect

• Account data: your email and, if you sign in with Google, your name and profile photo. With a magic link, we only collect your email.
• ZIP/postal code (optional): if you fill it in at simulated checkout, only to make the fake tracking experience feel more realistic.
• Simulated purchase history: your fictional 'orders,' accumulated savings, and achievements, to build your dashboard.
• Communication preferences (opt-in): if you authorize it, consent to receive the simulated order-tracking emails.
• Technical data: a random visitor and session identifier, pages and actions used (like viewing a product, completing a simulated purchase, or clicking an affiliate link), and campaign origin when you arrive via a UTM link. Used for aggregate metrics, not advertising profiles.

3. What we NEVER collect

Since Comprei Nada is a simulation and charges nothing, we never collect payment data: no card numbers, CVV, bank details, or financial information. There's no real checkout, so there's nothing to collect there.

4. Why we use your data

• Running the service: keeping your account, saving your simulated history, and showing your dashboard.
• Consent: to send the simulated order-tracking emails, when you opt in. You can withdraw consent at any time.
• Legitimate interest: aggregate metrics to understand usage and improve the site, always proportional and never invasive.

5. Cookies

We use the minimum necessary: authentication cookies to keep you signed in, and first-party analytics cookies that hold a random visitor identifier (up to a year), a temporary session (up to 30 minutes) and, when relevant, campaign origin (up to 90 days). They log usage metrics without storing payment data or affiliate-link destinations. Some preferences (like dismissing the support button) are kept only in your browser's local storage.

6. Who we share data with

We don't sell, rent, or trade your personal data. To run the service, we rely on processors that handle data on our behalf, under contract and only for the purposes above:

• Supabase — database and authentication (stores your account and simulated history).
• Resend — sends the simulated order's transactional emails.
• Vercel — hosting and aggregate usage metrics.

These providers may process data outside Brazil; in those cases we seek adequate protection safeguards, as required by the LGPD.

7. How long we keep data

We keep your data while your account exists. If you delete your account, we erase your associated personal data, except for the minimum the law may require us to retain. Aggregate metrics don't identify you individually.

8. Your rights

Brazil's LGPD guarantees you, among other things, the right to:

• confirm that processing exists, and access your data;
• correct incomplete, inaccurate, or outdated data;
• delete your account and the personal data processed under consent;
• withdraw consent and unsubscribe from emails at any time.

You can exercise any of this from your dashboard, or by writing to contato@compreinada.com.

9. Emails, unsubscribing, and minors

We only send simulated order-tracking emails if you opt in — every email includes a one-click unsubscribe link, and clicking it stops the emails immediately, no questions asked. Comprei Nada is intended for adults 18+; we don't knowingly collect data from children, and any account found otherwise may be removed.