Privacy Policy

In force since September 22, 2026.

This policy describes which personal data the site prudents.org processes, for what purpose, on what legal basis, for how long, and what your rights are.

1. Controller

Prudents operates the site prudents.org and is responsible for processing the personal data described in this policy. Under the Brazilian General Data Protection Law it acts as controller; under the GDPR, as controller.

The channel for any privacy matter, including contact with the data protection officer, is [email protected]. The company registration details will be added to this page once registration is complete.

This policy applies to the Portuguese, English, Spanish, Italian, German, and French versions of the site. If the translations diverge, the Portuguese text prevails.

2. Data processed

2.1. Site access data

The server records the IP address, the date and time of access, the page requested, and the browser identification. These records are necessary to run the site, to keep the application secure, and to contain abuse. They are not used to identify you by name.

2.2. Teste Anti-Golpe

The Portuguese site offers a free quiz called Teste Anti-Golpe. Answers are stored in the browser so the quiz can be resumed after an interruption. To delete that copy, clear the site data in your browser settings.

The site also sends usage events to Prudents infrastructure. These events make it possible to count how many attempts passed through each step and at which questions people left the quiz. What is recorded is a random identifier for the attempt, the date and time, the quiz version, the source, medium, and campaign given in the address used to reach the page, a general device category, and the events for entry, start, resume, question view, completion, result, offer, and checkout click.

When a question is answered, the question number, the option chosen, and whether the answer was correct are also recorded. On completion, the score and the attention point calculated by the quiz are recorded.

The statistics database does not store a name, an email address, a phone number, free text, an IP address, a full browser identification, or the full address of the referring page. This data is not used to create an account or to identify by name the person who answered.

2.3. Messages sent to Prudents

When you write to our support address, we process the content of the message, the sender email address, and any other information you provide voluntarily, to the extent needed to answer and resolve the request. This data is not added to a mailing list without an explicit request from you.

2.4. Google Tag Manager and cookies

The site loads Google Tag Manager directly, container GTM-MZBKCT5R. The container organizes the measurement and advertising tags used on the site, which may process an IP address, online identifiers, browser and device information, the page URL, the source of the visit, and interaction events, according to the active configuration and the policies of each provider.

The cookies and identifiers created by the tags in the container are used for audience measurement, campaign performance, and advertising. For information about retention, objection, and other rights related to the services loaded by the container, you may also consult the policies of those providers and contact us through the channel named in this page.

2.5. Third party advertising

The site may show ads supplied by Google, through Google AdSense, and by other advertising networks contracted by Prudents. To select, show, and measure those ads, these providers may process an IP address, identifiers stored in a cookie or on the device, the address of the page visited, an approximate location derived from the IP address, browser information, and events from interaction with the ad.

This data may be used to show personalized ads, to measure performance, to limit how often the same ad is repeated, and to identify fraudulent clicks. Prudents does not choose the individual ads shown, does not pass to advertisers the messages received through the support channel, and does not allow the display of an ad to interfere with editorial content.

Google describes the processing it carries out in that role in How Google uses information from sites or apps that use our services. Ad personalization can be turned off at any time at myadcenter.google.com, with effect on Google services regardless of the choice recorded on this site.

2.6. Cookie notice and your choice

On the first visit, the site shows a notice with the options to accept or decline non essential cookies. While no choice has been made, and also when the choice is to decline, the Google Tag Manager container is loaded with consent denied: the tags configured in it do not write a measurement or advertising cookie, do not read an advertising identifier, and receive only aggregated information, with no device identification.

The choice is recorded in your own browser and can be changed at any time through the “Cookies” button in the site footer. Declining does not limit access to any content.

For people located in the European Economic Area, the United Kingdom and Switzerland, consent for advertising is collected by Google’s privacy message, a certified consent management platform, as required to show ads in those regions. In those places that message replaces the notice described above: it is the only one that records the choice, and the “Cookies” button in the footer reopens its screen.

To decide which of the two notices to show, the site asks the content delivery network that already serves the pages for the country of the connection, based on the IP address. That check stores no cookie and does not identify anyone.

2.7. Fonts

Every font used on the site is served by Prudents own infrastructure. No page requests fonts from a third party service, so your IP address is not transmitted to external typography providers.

3. What Prudents does not do

• We do not sell personal data.
• We do not write a measurement or advertising cookie before you choose in the cookie notice.
• We do not ask for a password, a verification code, a photo of a document, or remote access to a device.
• We do not use quiz answers to identify you by name or to create an account.

4. Sharing

Data is shared with the providers needed to run the site: the hosting company and the email provider. Data processed by the Google Tag Manager tags may also be shared with the providers of the services configured in the container, according to their purposes and privacy policies. Data may also be shared to comply with a legal, regulatory, or judicial obligation.

5. Legal bases

The applicable laws require a legal basis for each processing purpose. The bases we rely on are:

• Running the site and containing abuse. legitimate interest. Without access logs it is not possible to contain attacks.
• Answering messages we receive. legitimate interest and, when the request concerns a purchase, performance of a contract.
• Selling and delivering material. performance of a contract.
• Tax and accounting obligations arising from a sale. compliance with a legal obligation.
• Analysis of use and drop off in the Teste Anti-Golpe, with the data described in section 2.2. legitimate interest of the controller, subject to necessity, transparency, and your right to object.
• Non essential cookies for measurement, campaign performance, and advertising. your consent, given in the cookie notice and withdrawable at any time through that same notice.

6. Retention periods

Access logs are kept for the period applied by the hosting provider and for any applicable legal periods. Email messages are kept while they are needed to handle the request and to evidence what was agreed. Teste Anti-Golpe answers stay in your browser until you delete them.

Individual quiz events are kept for 13 months. Before deletion they are consolidated into daily totals by step and by the filters described in this policy. Those daily totals, which do not preserve each individual attempt, are kept indefinitely to follow how the quiz evolves. Data received by other measurement technology providers follows the policies and settings of those providers.

7. Your rights

The Brazilian General Data Protection Law, Law 13.709 of 2018, gives you, at any time, the right to confirm that processing exists, to access your data, to correct incomplete or outdated data, to request anonymization, blocking, or deletion, to data portability, to information about sharing, and to object to processing where applicable.

Requests should be sent to [email protected] and are answered within 15 days. If the answer is not satisfactory, you may file a complaint with the Brazilian National Data Protection Authority.

8. Data subjects in the European Union and the United Kingdom

If you are located in the European Union or the United Kingdom, the General Data Protection Regulation and the UK GDPR apply. In addition to the rights listed above, you may request restriction of processing, object to processing based on legitimate interest, and receive your data in a structured, commonly used format for transmission to another controller. You may object to processing based on legitimate interest, within the limits of the applicable law.

Response time. Up to 1 month, extendable by 2 further months where the request is complex, with prior notice to you.

Complaints. If the answer is not satisfactory, you may complain to the data protection authority in your country. In the United Kingdom, the Information Commissioner’s Office. In Brazil, the National Data Protection Authority.

International transfer. Prudents is a Brazilian company and the site is published from Brazil, a country with a general data protection law. Visiting prudents.org therefore means your access data is processed in Brazilian territory. External providers may process data outside Brazil or outside your country, according to their policies, transfer mechanisms, and applicable safeguards. Requests for information about that processing can be sent to the channel named in section 1.

9. California residents

If you are a California resident, the California Consumer Privacy Act applies, as amended by the California Privacy Rights Act. Prudents does not sell personal data. Access data, online identifiers, and interaction events may be shared with analytics and advertising providers through the tags configured in Google Tag Manager. You may request information about the data processed, a copy, correction, and deletion, and exercising those rights will not result in discriminatory treatment. Requests should be sent to [email protected].

10. Children

The site is intended for adults and Prudents does not knowingly collect data from children. If such collection is identified, the data will be deleted once we are notified at the support address. In the European Union, processing based on consent requires a minimum age of 16, or the lower age set by the applicable national law, with authorization from whoever holds parental responsibility. In the United States, we do not collect data from anyone under 13.

11. Security

The site uses an encrypted connection and Prudents applies technical and administrative measures appropriate to the nature of the data processed. No system is entirely immune to incidents. The main security measure we apply is minimization: the site collects the minimum needed for the stated purpose.

12. Changes to this policy

Changes to this policy are reflected in the effective date shown at the top of the page. Relevant changes, such as a new processing purpose, a new provider, or a change to the advertising tags, are published along with the corresponding update to this page.