All articles

Privacy Policy

Last updated

This policy explains what personal data SaaSCron collects, why, who receives it and what rights you have. It is written to meet the main privacy laws that apply to a global website: the EU General Data Protection Regulation (GDPR), the UK GDPR, Brazil’s General Data Protection Law (LGPD) and the California Consumer Privacy Act as amended by the CPRA (CCPA).

Note: this text is written in plain language and has not yet been reviewed by a lawyer chosen by the site owner. It describes what the site actually does today; we update it before anything changes.

Who is responsible

SaaSCron (saascron.com) is operated by J Ricardo Machado Evangelista Administração de Obras Ltda. (CNPJ 68.688.453/0001-96), Av. Brigadeiro Faria Lima, 1811, São Paulo, SP, Brazil, which is the controller of your personal data. To contact us about privacy, email contato@saascron.com or use the options on the Contact page.

The short version

  • You can read SaaSCron without an account and without giving us your name or email.
  • We count visits with Google Analytics 4, run through Cloudflare Zaraz on Cloudflare’s servers. No Google script runs in your browser, your IP address is trimmed before Google sees it, and the data is kept for no more than 14 months.
  • In the European Economic Area, the United Kingdom and Switzerland, a bar asks for your consent before analytics runs. Elsewhere there is no bar and analytics runs in the privacy-friendly mode described below.
  • The site shows no advertising. The only cookies are our hosting provider’s security cookies and, where the bar is shown, one cookie that remembers your choice (see the Cookie Policy).
  • We do not sell your personal data, and we do not share it for cross-context behavioral advertising.
  • We do not send reader data to AI providers. AI is used to draft articles and covers, not to process data about you.

What we collect and why

Data When Purpose Legal basis (GDPR, UK GDPR, LGPD)
Technical data: IP address, browser, device type, requested page, referring page, time of visit Every visit, in our hosting provider’s server and security logs Deliver the site, keep it secure, stop abuse Legitimate interests (a working, secure website)
What you send us: email address, name if you give it, your message When you contact us Reply, handle corrections and privacy requests Legitimate interests; legal obligation for privacy requests
Usage data: page address (without query string), page title, referring page, country-level location from a trimmed IP address, browser and device description (user agent), screen size, language, a random visitor ID, time on page and your consent choice Every page view where analytics runs (see “Analytics”) Learn which articles are read and how the site is used, so we can improve it Consent, in regions where the law requires it; legitimate interests (understanding how our site is used) elsewhere

That is the full list today. We do not knowingly collect sensitive data, such as health data or data about religion or political opinions. Please do not send it to us.

Analytics

We measure how the site is used with Google Analytics 4. It works like this:

  • The measurement runs through Cloudflare Zaraz on Cloudflare’s servers. No Google script is loaded in your browser, and your browser never connects to Google. Zaraz sends each page view to Google Analytics from Cloudflare’s side.
  • Before anything is sent, Zaraz trims your IP address and removes the query string from the page address. Google receives the usage data listed in the table above, including the description of your browser and device that every browser sends (the user agent), so that it can report browser and device types. Google Analytics sets none of its usual _ga cookies here; the visitor ID is a random value stored by Zaraz in your browser, as described in the Cookie Policy.
  • In the European Economic Area, the United Kingdom, Switzerland and wherever we cannot tell which country you are visiting from, a bar at the bottom of the page asks for your choice first. Analytics runs only if you press “Accept and continue”. We use Google Consent Mode v2 to pass your choice to Google, and we keep your choice in one cookie for 12 months. You can withdraw consent by deleting that cookie; the bar then asks again.
  • Everywhere else there is no bar, and analytics runs in the privacy-friendly mode above when you visit. You can block it by blocking cookies and site data for saascron.com in your browser.
  • Google Analytics data is kept for no longer than 14 months.

Advertising

SaaSCron does not show advertising today. If we start showing Google AdSense ads, Google may use cookies to show and measure ads. Before that happens we will update this policy and the Cookie Policy, and ask for consent through a Google-certified consent tool where the law requires it. Where the law gives you the right to opt out of the “sale” or “sharing” of personal data for advertising, we will provide a way to do so.

Who receives your data

We use service providers that process data on our behalf:

  • Cloudflare, Inc.: hosting, content delivery, security and Cloudflare Email Routing, which forwards messages sent to contato@saascron.com.
  • Google LLC (Google Analytics 4): receives the usage data listed under “What we collect and why”, sent from Cloudflare’s servers through Zaraz, and stores it for no more than 14 months.
  • Google LLC (Gmail): hosts the mailbox that receives the forwarded messages, so Google stores the messages you send us.

If you contact the editor through LinkedIn instead, your message is processed by LinkedIn Corporation under LinkedIn’s own privacy policy, not this one.

We may also disclose data when the law requires it, or to protect our rights or the safety of others. We do not sell personal data.

International transfers

Our providers may process data in the United States and in other countries. When data from the EEA, the UK or Brazil is transferred to a country without an adequacy decision, we rely on the safeguards our providers offer, such as the EU-US Data Privacy Framework (and its UK Extension) or standard contractual clauses.

How long we keep data

  • Server and security logs: only as long as our hosting provider keeps them for security and operations.
  • Messages you send us: as long as needed to handle them, and then deleted, normally within 24 months. Privacy requests may be kept longer to show that we answered them.
  • Analytics data: no longer than 14 months (see “Analytics”). Your consent choice: 12 months, in your browser.

Your rights

Depending on where you live, you can:

  • access the personal data we hold about you and get a copy;
  • correct data that is wrong;
  • delete your data;
  • object to or restrict some uses of your data;
  • withdraw consent at any time, without affecting earlier processing;
  • port your data to another service, where that applies;
  • under the LGPD, ask whether we process your data, ask for anonymization or blocking of unnecessary data, and get information about who we share data with;
  • under the CCPA, know what we collect, delete it, correct it, opt out of its sale or sharing (we do neither) and not be treated differently for using your rights.

To use any of these rights, email contato@saascron.com or use the options on the Contact page. We will answer within the time the law sets, normally one month (GDPR and UK GDPR), 15 days (LGPD) or 45 days (CCPA). We may need to confirm your identity first. An authorized agent may also make a request for you.

You can also complain to a data protection authority, for example your local supervisory authority in the EEA, the Information Commissioner’s Office (ICO) in the UK, or the Autoridade Nacional de Proteção de Dados (ANPD) in Brazil. We would appreciate the chance to answer your concern first.

Children

SaaSCron is written for adults working with or learning about software. It is not directed to children under 16, and we do not knowingly collect their data.

Security

The site is static and served over HTTPS. We do not run reader accounts, comments or forms that store data on our servers. Access to our tools is limited and protected with two-factor authentication.

Changes to this policy

When we change this policy, we update the date at the top of the page. If a change is significant, such as turning on advertising, we will say so on the site.

Translations

SaaSCron is published in English. If we offer this policy in other languages through AI translation and a translation differs from the English text, the English text applies.