Moggy Digital

Privacy Policy

How we handle your data

Last updated: September 24, 2026. This policy applies to the moggydigital.com.br website and was prepared in compliance with the Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018) and the European Union General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

1. Who the controller is

The controller of the data processed by this website is Moggy Digital. For any matter related to personal data, write to contato@moggydigital.com.br. The same channel serves as the data protection officer (DPO) contact required by the LGPD and the GDPR.

2. What data we collect

This is a static website, with no user registration and no forms that store data on our servers. The data processed is limited to:

  • Access records (logs): IP address, date and time of access, pages visited and browser identification (user agent). These records are generated automatically by the hosting infrastructure (Amazon Web Services) and used only for security and diagnostics. In Brazil, keeping access records for 6 months is a legal obligation (Marco Civil da Internet, art. 15).
  • Data sent by email: if you write to us, we process your email address and the content of the message solely to reply to you.
  • Audience measurement (only with your consent): if you choose "Allow statistics" in the cookie notice, Google Analytics 4 collects browsing data (pages visited, traffic source, device characteristics and random identifiers stored in cookies) in aggregate form, so we can understand the site's audience.

We do not collect sensitive data, we do not use data for advertising and we do not sell personal data to third parties.

3. Legal bases

We process personal data on the following legal bases:

  • Legitimate interest (LGPD, art. 7, IX; GDPR, art. 6(1)(f)): for the access records needed for the security and operation of the site;
  • Compliance with a legal obligation (LGPD, art. 7, II; GDPR, art. 6(1)(c)): for the log retention required by the Marco Civil da Internet;
  • Consent (LGPD, art. 7, I; GDPR, art. 6(1)(a)): for the Google Analytics 4 statistics cookies, set only if you choose "Allow statistics" in the cookie notice. You can change your choice at any time in the Cookie Policy.

4. Cookies

This website does not use advertising cookies. The Google Analytics 4 statistics cookies (_ga and _ga_*, from Google LLC) are set only if you choose "Allow statistics" in the cookie notice; without that authorization, no cookie is set. Your choice, and the language you pick in the language suggestion bar, are stored only in your browser (localStorage) and are not sent to our servers. Details and how to change your choice in the Cookie Policy.

5. Who we share data with

We use Amazon Web Services (AWS) as our hosting and content delivery provider. AWS acts as operator (LGPD) / processor (GDPR) and processes access records on our behalf, under its own data protection commitments. If you allow statistics, Google LLC (United States) also acts as operator/processor for audience measurement (Google Analytics 4), processing browsing data on our behalf. We do not share personal data with other third parties, except by legal obligation or order of a competent authority.

6. International transfer

The AWS infrastructure may process data on servers located outside Brazil and the European Economic Area, notably in the United States. In such cases, the transfer relies on the safeguards provided for in the LGPD (art. 33) and the GDPR (Chapter V), including standard contractual clauses adopted by AWS and, where applicable, the EU-U.S. Data Privacy Framework. The same applies to the audience measurement data processed by Google LLC, when you authorize it, also based on standard contractual clauses and, where applicable, the EU-U.S. Data Privacy Framework.

7. How long we keep data

  • Access records: up to 6 months, as required by the Marco Civil da Internet, unless a legal obligation requires a longer period;
  • Email messages: for as long as needed to handle the matter of the contact and for any legal retention period.

8. Your rights

If you are in Brazil, the LGPD (art. 18) guarantees, among others, the rights to confirmation of processing, access, correction, anonymization, portability, deletion, information about sharing and withdrawal of consent.

If you are in the European Union or the European Economic Area, the GDPR (arts. 15 to 22) guarantees the rights of access, rectification, erasure ("right to be forgotten"), restriction of processing, portability, objection and not to be subject to decisions based solely on automated processing.

To exercise any of these rights, write to contato@moggydigital.com.br. We will reply within the applicable legal deadlines.

9. Complaints to authorities

You may also lodge a complaint with the National Data Protection Authority (ANPD), in Brazil, or with the data protection authority of your country, if you are in the European Union.

10. Changes to this policy

This policy may be updated to reflect changes to the site or to the law. The date of the last update appears at the top of the page. Relevant changes will be highlighted here.