Last updated: 26 September 2026
This is the personal editorial website of Thiago Grusmão, a Brazilian living in Japan. This notice explains how information is handled on this website. It covers the features available now, rather than services that may be introduced later.
Information you send
Contact messages
The contact form asks for your email address and message; your name is optional. Please include only information needed for your enquiry. Messages are used to read and respond to you and keep a record of the conversation, not to sign you up for a newsletter.
The form is built with Elementor. Submissions are stored in the website’s WordPress database and emailed to Thiago’s Gmail inbox. The submission also records your IP address and browser user-agent information. Email notifications include the submission date and time and the page URL.
Comments
When you comment, WordPress collects your comment, name and email address, an optional website address, and technical information including your IP address and browser user agent. Your name, comment and any website link you provide may be public after publication. Your email address is not displayed publicly.
Comments are checked for spam with Antispam Bee. Its external country, language and Gravatar checks are not enabled in the current configuration. WordPress avatar display is enabled separately: an email-derived identifier may be sent to Gravatar to retrieve an avatar. If displayed, the avatar accompanies the comment, and your browser connects to Gravatar. See Automattic’s privacy policy.
Technical information and cookies
Hosting and security systems process technical information needed to deliver pages, investigate errors and protect the site. This can include IP addresses, requested URLs, timestamps and browser information. The site is hosted with Hostinger and uses WordPress, Elementor, LiteSpeed Cache, Rank Math, Wordfence and UpdraftPlus for its operation, presentation, security and backups. Installing a plugin does not mean every service it offers is enabled.
CookieYes provides the existing consent interface and remembers cookie preferences. WordPress can also remember comment details if you select the comment form’s optional checkbox. Administrative login cookies serve authorised site users rather than ordinary readers. Details and controls are explained in the Cookie Policy.
Google services and external content
The site loads Source Serif 4 and Source Sans 3 through Google Fonts. Requests to an external font service disclose connection information, including your IP address and browser information, to that provider.
Google Analytics tracking was not identified on the public pages checked for this notice. Site Kit is installed but requires reconnection. Rank Math shows an incomplete Analytics connection; a selected account alone does not establish that visitor tracking is running. Search Console is shown as connected in Rank Math and is used for search-related site information; this is distinct from a visitor Analytics tag.
No active Google Tag Manager container, advertising tag or embedded video was identified on those pages. Links to Instagram, YouTube and other websites take you to services with their own privacy practices. Following a link is different from loading an embedded player. If external embeds or tracking are introduced, this notice and the relevant controls will need to be reviewed.
Who receives information
Information is handled by Thiago and the providers needed to operate these features: Hostinger for hosting, Google for Gmail and externally loaded fonts, CookieYes for consent tools, and Automattic/Gravatar when an avatar is requested. Wordfence security functions may involve Defiant’s services; the exact enabled remote options and their retention have not yet been fully verified. Data may also be disclosed where required by law or reasonably necessary to address abuse or protect legal rights.
These providers may process information outside Japan. Their locations, safeguards and retention depend on the service. This notice does not promise that all information stays in Japan. Provider details are available in the privacy notices of Hostinger, Google, CookieYes and Wordfence.
Storage and retention
Contact messages remain in WordPress and the receiving mailbox until removed. A fixed automatic deletion period for these messages has not been established. Published comments and their metadata are generally retained with the discussion unless removed. The current antispam setting deletes items marked as spam after five days.
Backups can contain copies of messages, comments and other database records. Deleting an item from the live database does not necessarily remove it immediately from an older backup. Exact hosting-log, security-log, mailbox and backup retention periods are still being confirmed; no single deletion deadline is promised here. You can ask about information relating to you using the contact route below.
Security and your choices
The site uses HTTPS and existing hosting and WordPress security tools. No website, email system or storage method can be guaranteed completely secure. Please do not send passwords, payment details or sensitive documents through the contact form.
You can request access to, correction of or deletion of personal information relating to you, or raise an objection or restriction request where applicable. Available rights and exceptions depend on the law that applies. Some records may need to be kept for security or legal reasons. Reasonable verification may be needed before disclosing or deleting information.
To ask a privacy question or make a request, use the contact form and mention “Privacy request” in your message. Include enough detail to locate the relevant message or comment, without sending unnecessary identification documents. You may also contact the relevant data-protection authority where you have that right.
Changes to this notice
The date above identifies this version. This notice will need review when the site’s data practices change. It does not state that future advertising, affiliate programmes, paid services or newsletters are already operating.