Privacy policy

Updated on November 4, 2026. Courtesy translation: in case of any difference, the Portuguese version prevails.

This policy explains which personal data Espiral Atlas 3D uses, why, with whom it shares it and what your rights are, in accordance with the Brazilian General Data Protection Law (LGPD, Law 13,709/2018). The data controller is Lucas, an individual, maintainer of the Atlas. Contact for any privacy matter: lucasxtrabalhox@gmail.com.

1. What data we collect

• Sign-up with email and password: name, email and password. The password is stored only in scrambled form (hash), never as text. The CPF (the Brazilian taxpayer number) is only requested at the time of the first payment: it is sent to Asaas to issue the charge and is not kept in the Atlas database.
• Sign-in with Google: we receive your name and email from Google. We do not receive your Google password. The CPF is only requested at the time of the first payment and is also only sent to Asaas.
• Payments: we keep the charge code, the amount, the date and which account it belongs to, to unlock access and handle refunds. Card or Pix details stay with Asaas.
• Access and security: to limit password attempts and protect against robots, the system keeps your IP address and the email typed for a short time, in counters that are deleted automatically. Cloudflare's infrastructure also logs the IP on accesses.
• In your browser: a session cookie, needed for you to stay signed in (lasts up to 30 days or until paid access ends), a cookie with the language chosen, and local storage, where the app keeps preferences and your study progress (for example, stars and quiz results). This study data stays only on your device and is not sent to the Atlas.

We do not use advertising cookies, we do not use behavior analytics tools and we do not sell data.

2. What we use it for (and the legal basis)

• Create and maintain your account, unlock paid access and receive payment: performance of the contract.
• Send the password reset email when you ask for it: performance of the contract.
• Protect the service against fraud, abuse and robots: legitimate interest and fraud prevention.
• Keep payment records for the period required by law: compliance with a legal obligation.

We only use your email for the operation of the service (password reset, notices about the account or the terms). We do not send advertising.

3. Who we share it with

• Cloudflare: hosting of the site, the database and the anti-robot check (Turnstile).
• Asaas: payment processing and issuing of charges (receives name, email and CPF).
• Resend: sending the password reset email (receives your email).
• Google: only if you sign in with a Google account.
• Google Fonts and jsDelivr: the app loads fonts and libraries from these services, which may see your IP when providing those files.

Some of these services are located in other countries. In those cases, processing is carried out in accordance with the LGPD, by companies that adopt security and data protection measures. We may also provide data when a public authority requires it by law.

4. How long we keep it

Account data stays for as long as the account exists. When you ask for deletion, we delete the account and the data linked to it, except payment records, which we keep for the period required by law (generally 5 years). The access-attempt counters are deleted automatically soon after.

5. Your rights

You may, at any time, ask for: confirmation that we process your data and access to it; correction of wrong data; deletion of the data; portability; information about who we share it with; and withdrawal of consent, when applicable. Write to lucasxtrabalhox@gmail.com from the email of the account. We reply within 15 days. You may also complain to the Brazilian National Data Protection Authority (ANPD).

6. Security

We use an encrypted connection (HTTPS), passwords stored as hashes, attempt limits, anti-robot checks and restricted access to the paid files. No system is completely immune to failures; if there is an incident that may put you at risk, we will notify you and the ANPD, as the law requires.

7. Minors

The Atlas is intended for people over 18. Minors should only use it with the authorization of a parent or guardian.

8. Changes

If this policy changes, the new version appears here with the updated date, and important changes will be announced by email.

Back to the Atlas