AevumPrivacy policy
This policy explains how Aevum Lectio handles personal data. It follows Brazil’s General Data Protection Law (Law 13,709/2018) and, for visitors in the European Union and the United Kingdom, the GDPR and the UK GDPR.
Who is responsible
The data controller is Aevum Lectio, that is, 70.118.149 Diego Ribeiro de Souza (sole trader, Brazilian CNPJ 70.118.149/0001-55), Rua Manoel Ribeiro, 596, Cidade Nova, Uberaba (MG), 38082-386, Brazil. Contact: see the contact page.
Browsing this site
The site uses no tracking cookies and no ads, and loads no fonts or images from other sites. On your first visit, a notice asks whether you allow visit measurement. Only if you accept does the site use Umami, a statistics tool installed on the publisher's own server, which counts page views without cookies and without identifying you (the IP address is not stored). Your choice is saved in your browser and can be changed at any time through the "Privacy settings" link in the footer. If you do not accept, just reading the pages creates no record about you made by us. Hosting is by Cloudflare, which may log technical access data (such as the IP address) for security and performance.
Your cart is kept in your own browser (local storage) and does not reach our server until you ask to pay.
Signing in to your account
To see the e-books you bought, you can sign in. There is no password: we send a link to your email, valid for 15 minutes and usable only once. When you sign in, the site stores a single session cookie, strictly necessary to keep you signed in for up to 30 days (it is deleted when you click “Sign out”). We keep your email and the dates of account access only for this purpose.
Buying an e-book
- Payment. Payment is made on Stripe’s page, not ours. Card or other payment details are handled by Stripe and never pass through us. From Stripe we receive only the payment confirmation, the amount, the currency, your email and the country and postal code used to calculate tax.
- Delivery. We use your email to send the download link (through the email service Resend) and we keep the order record so the link works, to answer support requests and to meet legal and tax obligations.
- Bot protection. The cart and sign-in pages use Cloudflare Turnstile, which checks that the visit comes from a person without asking you to solve images. Only on those pages does the browser load a Cloudflare script.
We do not sell or give away your data and we do not use it for advertising. If you want to receive news about the books, that will happen only with your express consent, given separately.
Why we may process your data (legal bases)
| Purpose | Basis (GDPR / UK GDPR) |
|---|---|
| Processing your order, payment and delivery | Performance of the contract |
| Sign-in link and session cookie | Performance of the contract; the cookie is strictly necessary |
| Tax, accounting and legal records | Legal obligation |
| Security, bot protection and fraud prevention | Legitimate interests |
| News about the books (only if you ask) | Consent, which you can withdraw at any time |
In Brazilian law the equivalent grounds are those of article 7 of the LGPD (contract, legal obligation, legitimate interest and consent).
Who receives your data and where it goes
We use these providers to run the store: Stripe (payments), Cloudflare (hosting, storage of the files and bot protection), Resend (sending email) and, for print books only, Lulu Press (printing and shipping in the United States; it receives your name, shipping address, phone and email). Visit statistics, when you allow them, run on our own server with Umami. They process data on our behalf and may do so in countries other than yours, including the United States. Where data leaves the EU or the UK, we rely on the safeguards allowed by law, such as an adequacy decision (the European Commission recognized Brazil’s level of protection as adequate in January 2026) or standard contractual clauses. Ask us through the contact page for details.
How long we keep it
Order records are kept for as long as needed for support and for tax and accounting obligations, which we currently estimate at up to five years after the purchase. After that they are deleted or anonymized. Sign-in links expire in 15 minutes; session cookies in 30 days at most.
Your rights
You may ask for confirmation that we process your data, access to it, correction of incorrect data, deletion, restriction or objection to processing, and a portable copy of the data you gave us. Where processing rests on consent, you may withdraw it at any time. Write to us through the contact page; we answer within one month.
If you are not satisfied, you may complain to a data-protection authority: in Brazil, the ANPD; in the EU, the authority of your country; in the United Kingdom, the Information Commissioner’s Office.
Children
The site is not aimed at children, and we do not knowingly collect their data.
Changes
If this policy changes, the new version will be published on this page, with the date of the change.
Version of November 13, 2026.