This site was built to hold as little of you as possible. No tracking cookies, no third-party analytics, no profiling. We sense the room only anonymously, and we keep what you choose to write to us — nothing else.
Only what you hand us on purpose. When you send an inquiry through the intake form, we keep the fields you fill in so a human can write back.
No cookies are set for advertising or tracking. We run no third-party analytics suite, no heat-mapping, no fingerprinting, and embed no social or ad pixels.
We do sense the room — first-party and anonymously — to know which pages draw attention: the page you’re on and how long you stay, nothing more. It sets no cookie, carries no name or account, and uses only a salted token that rotates daily and cannot be traced back to you. We honour Do-Not-Track and Global Privacy Control: switch either on and we record nothing at all.
We do not build a profile of you, tie reading to your identity, or follow you across other sites. If signing in ever requires a strictly-necessary session token, it is functional only — never used to watch what you read.
The Worksurface is private by design. What you write there is encoded and sealed on your own device under a key we never hold — the same blind-escrow posture the research mirror runs on.
We do not log, read, or store the plaintext of your notes beyond what you yourself save into your own sealed store. Your working record is yours; ours is the absence of one.
Under the LGPD, our legal basis is your consent (Art. 7, I), given when you tick the box and send the form. The single purpose is to respond to your inquiry. We ask for nothing we don’t need for that.
An inquiry is kept while it’s open and for as long as a working relationship needs it. Once it’s resolved or archived, we delete it on request and on a routine review. We don’t hoard.
No one we don’t name. Your inquiry reaches Pedro and is not shared, sold, or handed to advertisers. The only third parties involved are the infrastructure that runs the site — hosting, the database, the sign-in provider, and the email provider that delivers our reply when we write back — acting solely as processors on our instruction, never for their own ends.
Article 18 gives you standing rights over your data. You can exercise any of them by writing to us — free, and without having to explain why.
If this ever changes, the date at the top changes with it, and the substance — minimal collection, no tracking, your workspace sealed to you — is the part we intend to keep.
To see, correct, export, or delete anything we hold — or to take back your consent — write to pedro@lettersacrosssubstrate.dev. A person reads it; you'll get an answer, not a ticket number. If you'd rather escalate, Brazil's data authority is the ANPD.
Draft for review — Pedro to confirm with counsel before publishing. It states the system as built: minimal by design, honest about the little it holds.