Privacy Policy

Last updated: June 2026.

Afinados is an Eiseron product. This policy describes what data Afinados processes and why. The product is guest-first: you use the tools without signing up.

Who the controller is

Eiseron (CNPJ 41.516.538/0001-30) is the controller of the data processed by Afinados. Contact: contato@eiseron.com.

Data we process

• Session cookie. A single signed first-party cookie, strictly necessary. It holds two distinct values: the secret used for CSRF protection (security) and a random guest token that links your saved setups to this browser without an account. The two are not the same value. Neither identifies you personally, and neither is used for tracking or advertising.
• Saved setups. Technical carburetor data (needle, jets, clip, shim, venturi). This is not personal data.
• Error logs. When something fails, we record the error (which may include IP and browser identification) for diagnostics and security. Collection runs on our own infrastructure (self-hosted GlitchTip), not a third party.
• Usage metrics. We use Cloudflare Web Analytics, an aggregate, cookieless analytics that counts visits and pages without tracking individuals and without building a profile.
• Delivery and protection (Cloudflare). To serve and protect the site, Cloudflare processes the visitor's IP.

There is no signup and no collection of identifying personal data from guests, and we use no other analytics or marketing tools.

Legal basis

The session cookie is treated as strictly necessary to the service. Error logs and aggregate metrics rely on the legitimate interest of keeping the service secure and working, in a proportionate way and without individual tracking.

Where data lives and security

The application, the database, and the error logs run on a server in Brazil. We apply reasonable security measures to protect the service, and backups are encrypted and stored off the server.

Sharing and international transfer

We do not sell your data or share it for marketing. To deliver and protect the site, we use Cloudflare as a processor; because it uses Cloudflare's global network, your IP may be processed on servers outside Brazil, subject to Cloudflare's contractual safeguards. The remaining operations stay on our own infrastructure in Brazil.

Retention and deletion

Your setups persist while the cookie and the record exist. You can delete setups at any time inside the tool, and clearing your browser cookies removes the link to this device.

Your rights

Under Brazil's LGPD (article 18), you may request at any time, through the contact below:

• confirmation that we process your data and access to it;
• correction of incomplete or outdated data;
• anonymization, blocking, or deletion of unnecessary data;
• information about who the data is shared with;
• deletion of the processed data.

The channel for privacy matters is contato@eiseron.com. You may also file a complaint with the Brazilian Data Protection Authority (ANPD).

Children and adolescents

Afinados is not directed at people under 18, and we do not knowingly collect personal data from children or adolescents.

Changes

We may update this policy. The "last updated" date at the top marks the current version.