Privacy Policy

Updated on September 26, 2026

1. Who the controller is

Reprograme is the controller of the data processed on this site under Regulation (EU) 2016/679 (GDPR) and Brazilian Law 13.709/2018 (LGPD). Data protection officer: mail@reprograme.com.

2. What we collect and why

• Item, reason and triggers — to build the reflection and justify the suggested waiting period.
• Price and payment method — to calculate the cost in hours.
• Monthly income — essential to turn a price into working time. It is the most sensitive field we ask for, so it is stored encrypted. It never appears on any other screen.
• Email — to send the end-of-wait reminder, the price-drop alert if you provide a link, and the confirmation link when you ask us to delete your data. Stored encrypted.
• Product link (optional) — to read the price published on that page during the wait.
• Session identifier and IP address — so you can resume the wizard where you left off, and for basic security.
• Contact messages — subject, email, name (optional) and the text you write on the contact page, so that we can answer. Email, name and text are stored encrypted.

3. Legal basis

Processing relies on your consent (GDPR art. 6(1)(a); LGPD art. 7, I), collected explicitly before the reflection is stored. You may withdraw it at any time by deleting your data — withdrawal does not affect the lawfulness of processing carried out beforehand. Handling a deletion request, in turn, relies on compliance with a legal obligation and on fulfilling a data subject right (GDPR art. 6(1)(c); LGPD art. 18, VI and art. 7, II).

4. How long we keep it

• Reflection in progress (session): 7 days of inactivity, then discarded automatically.
• Completed reflection: until you ask for deletion. With no pending reminder and no active monitoring, we delete it after 24 months of inactivity.
• Reminders: deleted together with the reflection they belong to.
• Deletion request in progress: the address you enter is kept only until the confirmation link is sent. If delivery fails we erase it after 7 days — and after 30 days in any case.
• Contact message: 12 months. The email address and the text are deleted together, automatically. Asking for your data to be deleted also removes the contact messages from the same address, before that deadline.

5. Who we share with

Nobody, for commercial purposes. The data lives with the hosting provider that runs our servers and database, acting as a processor, and with the email service used for the product emails: the reminder, the price alert and the deletion confirmation. In the application — the reflection, the reminders, the contact page and this page — there is no third-party analytics, no tracking pixel, no advertising.

The pages of the essay "What is money?" show Google AdSense ads, which help cover the costs of the site. There, and only there, the browser loads Google's script, which receives technical data about the visit — such as the IP address, the browser and the page read — and processes it as an independent controller. Nothing you enter in the reflection reaches Google. In the European Economic Area, the United Kingdom and Switzerland, you choose in Google's consent window; everywhere else, we ask Google for non-personalised ads only. How Google uses that data: policies.google.com/technologies/partner-sites. To adjust the ads you see: myadcenter.google.com.

6. Cookies

• reprograme_session — keeps your reflection in progress. Strictly necessary. Expires in 7 days.
• locale — remembers the language you chose. Expires in 1 year.
• cookie_ok — records that you have seen the notice, so we do not repeat it. Expires in 1 year.
• reprograme_csrf — protects forms against cross-site request forgery (CSRF). Strictly necessary for security. Expires when you close the browser.
• Google cookies, only on the essay pages (__gads, __gpi and __eoi) — set by the ads script to display and measure ads, cap repetition and fight fraud; and FCCDCF and FCNEC, from Google's consent window. Names and durations are set by Google.

The first four are strictly necessary or preference cookies and apply across the whole site. Google's exist only on the essay pages: the application screens load no third-party scripts.

7. Security

Income and email are encrypted with AES-256 before reaching the database; the key is stored outside the database. Traffic is served over HTTPS with HSTS. The application enforces a restrictive CSP and CSRF protection, and its screens load no third-party scripts; the essay pages load only Google AdSense's, under a policy of their own.

8. Your rights

You may request confirmation of processing, access, rectification, anonymisation, portability and erasure of your data, and withdraw consent (GDPR arts. 15–22; LGPD art. 18). The fastest route is the deletion page below; for anything else write to mail@reprograme.com — we reply within 15 days.

If you live in the European Union you may complain to your national data protection authority. If you live in Brazil, to the ANPD.

Delete my data

9. International transfers

Our servers may sit outside your country. When that happens, the transfer relies on the provider standard contractual clauses and on the safeguards required by Chapter V of the GDPR and art. 33 of the LGPD.

10. Changes to this policy

If anything changes materially, we announce it on this page with an updated date before the change takes effect.