Privacy Policy | Myke the Drop

1. Who is responsible for your data

Myke the Drop is the controller of the personal data processed on this site. For any privacy matter, including contacting our data protection officer, use the contact page and choose the subject “Privacy and personal data” or write to mykethedrop@gmail.com.

2. What data we collect

When you create an account

Name: shown publicly next to your comments.
Email: used to log in. It is not displayed on the site and is not shown to other users.
Password: stored only in encrypted form (hash). Not even we can see your password.
Last access date: we record the last day you used the site while logged in, to know which accounts are still active.

Team notes

The site administration may add internal notes and labels to your account related to moderation and your relationship with the site (for example, “giveaway winner” or “partner”). They are not public and never include sensitive data such as health, religion or political opinion. You can ask to see or correct them.

When you comment

The comment text, the date and the link to your account. Comments are public.

When you use Drops

We record which coupons and discounts you redeemed (by revealing the code or opening the store link) and when, to measure interest in each offer and track partnerships. What you buy at the partner store does not reach us.

When you use the contact form

Name, email, subject and message, so we can reply.

When you talk to us on WhatsApp

We receive your number, profile name and the messages in the conversation, used only to reply to you. The conversation happens on WhatsApp, which follows Meta's own privacy policy.

When you turn on notifications

Your browser gives us a technical delivery address and encryption keys, used only to send alerts about new posts, and we store the site language (Portuguese or English) you were using, to send the alert in it. This record does not include your name or email.

When you read a post

We only record that the post was viewed and when, to build the “Most read” list and the view counter. This record does not store your IP address, your account or any data that identifies you.

Audience statistics

We use Vercel Web Analytics to know how many people visit the site and which pages are the most popular. It does not use cookies and does not store your IP address: each visit is counted anonymously and in aggregate, without identifying you or following you on other sites.

Technical data

The providers that host the site may log technical access data, such as IP address, browser and date and time, for security and to keep the service running. The language set in your browser is read on your first visit only to open the site in Portuguese or English, and is not stored.

3. Why we use data and on what legal basis

Keeping your account and allowing comments: performance of the service you requested (art. 7, V, LGPD).
Moderation, security and abuse prevention (for example, hiding comments or blocking accounts that violate the Terms of Use): legitimate interest (art. 7, IX) and enforcement of our Terms.
Reading and audience statistics: legitimate interest, with data that does not identify you.
New post notifications: your consent, given when you turn on the bell. You can withdraw it at any time by clicking the bell again or in your browser settings.
Replying to contact messages: legitimate interest and handling your request.
Complying with legal obligations or orders from authorities, when applicable (art. 7, II).

We do not sell your personal data.

4. Cookies and browser storage

Session cookie (myke_the_drop_session): keeps you logged in for up to 7 days. It is essential for login to work and is not used to track you.
Language preference (NEXT_LOCALE): stores the language you chose in the menu (Portuguese or English) for up to 1 year, so the site opens in it on your next visits. It is only created if you switch languages.
Browser session storage: prevents the same visit to a post from being counted more than once. It is cleared when you close the tab.
Theme preference: remembers whether you chose the light or dark theme for your next visits. It stays in your browser only.
Service worker: a small browser script that receives notifications, if you turn them on.

We currently do not use advertising or third-party tracking cookies. If that changes (for example, to show ads), this policy will be updated beforehand, and we will ask for your consent when the law requires it.

5. Who we share data with

We only share data with providers needed for the site to work:

Hosting and database: cloud services that store accounts, comments and messages.
Image storage: post cover images are kept in a cloud storage service (Cloudflare).
Audience statistics: Vercel Web Analytics, which only receives anonymous visit data.
Browser notification services (such as Google's, Mozilla's or Apple's), which deliver the notifications you turned on.
WhatsApp (Meta), when you choose to talk to us there.
Public authorities, only when required by law or court order.

Some of these providers have servers outside Brazil, such as in the United States. In those cases the international transfer follows art. 33 of the LGPD, with providers that adopt data protection safeguards.

6. How long we keep data

Account: for as long as it exists. You can ask for it to be deleted at any time.
Comments: for as long as the account exists, or until removed by you (on request) or by moderation.
Contact messages: for as long as needed to handle the request.
Notification subscription: until you turn notifications off or the browser invalidates the subscription.

We may keep data longer when the law requires it or to defend ourselves in legal claims.

7. Your rights

Under art. 18 of the LGPD, you may at any time:

confirm whether we process your data and access it;
correct incomplete, inaccurate or outdated data;
request the anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
request the portability of your data;
request the deletion of your account and of data processed based on consent;
know who we share your data with;
withdraw your consent;
file a complaint with Brazil's National Data Protection Authority (ANPD), at gov.br/anpd.

To exercise any of these rights, use the contact page. For your security, we may ask you to confirm that you own the account before handling the request.

8. Security

We take technical measures to protect your data, such as encrypted passwords, secure connections (HTTPS) and a session cookie that site scripts cannot access. No system is 100% secure; if an incident occurs that may cause relevant risk or harm, we will notify those affected and the ANPD, as required by law.

9. Children and teenagers

Sign-up is not intended for children under 12. Teenagers should create an account and comment with the knowledge and permission of their parents or guardians.

10. Changes to this policy

We may update this policy to reflect changes to the site or the law. The date of the last update is shown at the top of the page. Important changes will be announced on the site.