Who Is Responsible

The Hermetic School (thehermeticschool.org), based in Brazil, is the controller of the personal data described here. For any question or request about your data, write to contact@thehermeticschool.org. We answer within 15 days.

The Short Version

  • If you subscribe to the newsletter, we keep your email address to send it.
  • If you accept analytics, Google Analytics records which pages are read. If you decline, it is never loaded.
  • The stage finder runs entirely in your browser. Your answers and your result are never stored or sent anywhere.
  • Purchases happen on Gumroad, not on this site.
  • We do not sell personal data, and we do not use advertising trackers.

What We Collect and Why

Newsletter

Data: your email address, the date you subscribed, and whether you open or click our emails. Purpose: sending The Inner Circle. Legal basis: your consent (LGPD art. 7, I; GDPR art. 6(1)(a)). Kept: until you unsubscribe, which you can do from the link in every email. Processor: MailerLite (MailerLite UAB, Lithuania).

Analytics, only if you accept

Data: pages visited, how you arrived, device and browser type, approximate location, and a few events: clicks to Gumroad, newsletter sign-ups, and the fact that the stage finder was used (never what you marked in it). Google Analytics sets cookies named _ga and _ga_*, which last up to two years. Purpose: understanding which writing is useful. Legal basis: your consent. Kept: event data for up to 14 months. Processor: Google (Google Ireland Ltd. / Google LLC).

You can change your choice at any time:

Stage finder

The stage finder asks questions that can touch on mental health. Everything is processed in your browser and disappears when you leave the page. Nothing you mark is stored, sent to us, or sent to analytics.

Hosting

Like any website, our host receives your IP address and the pages you request, in order to deliver them and protect the site from abuse. Legal basis: legitimate interest in operating a secure site (LGPD art. 7, IX; GDPR art. 6(1)(f)). Processor: Vercel Inc. (United States), which keeps these logs for a short period.

Purchases

Ebooks are sold through Gumroad, which processes your payment under its own privacy policy. Gumroad shares your name, email and order with us so that we can deliver and support your purchase. Legal basis: performance of the contract (LGPD art. 7, V; GDPR art. 6(1)(b)). We keep order records for as long as tax and consumer law require.

Embedded videos

Videos are embedded in YouTube's privacy-enhanced mode, which sets no cookies until you press play. When you play a video, Google processes data under its own privacy policy.

Fonts and your choice

Fonts are served from this site, not from a third party. Your cookie choice is saved in your browser's local storage so that we do not ask again.

International Transfers

Some of the providers above are in the United States or the European Union. Transfers rely on the safeguards those providers offer, such as standard contractual clauses and, where applicable, the EU–US Data Privacy Framework (LGPD art. 33; GDPR chapter V).

Your Rights

You can ask to access, correct, delete or receive a copy of your data, ask who we share it with, object to processing based on legitimate interest, and withdraw consent at any time without affecting what was done before (LGPD art. 18; GDPR arts. 15–22). Write to contact@thehermeticschool.org. You can also complain to Brazil's data protection authority, the ANPD (gov.br/anpd), or to the authority in the country where you live.

Children

This site is not directed at children under 16, and we do not knowingly collect their data.

Changes

If this notice changes, the date at the top changes with it. Significant changes will be announced in the newsletter.