Privacy and cookies
Privacy and cookie policy
This text describes what the site does at ad launch. It is not legal advice. Counsel review and confirmation of the contact email and SIRET should happen before the first production publish.
This page explains who is responsible for the site, what data we process, how consent works in the required region, and which cookies may be used.
Controller
The controller is Jéssica Altenhofen, based in Paris, France. The production site is https://jessicaaltenhofen.com.
Contact email (to be confirmed): contato@jessicaaltenhofen.com.
SIRET: to be confirmed — not invented.
What we process
We process only what is needed to run the site, measure conversions, and, when allowed, run ads.
- Vercel hosting: HTTP requests, IP address, and inferred country (x-vercel-ip-country) to decide whether the visitor is in the consent-required region.
- Language preference (NEXT_LOCALE) and consent cookies (geo-consent-region and consent-choice).
- Google Analytics 4 via Google Tag Manager: generate_lead (WhatsApp click) and instagram_click events.
- Meta Pixel: PageView and Lead. Meta Conversions API: Lead with fbp, fbc, IP, and user-agent. No identifiable personal data and no PII hashing.
- WhatsApp handoff: the conversation happens on WhatsApp (Meta), not on this site.
Consent-required region
Visitors from the European Union, the European Economic Area, and the United Kingdom (GB) see a consent banner. Switzerland is not in that region at launch. A missing or unknown country is treated as the consent-required region (fail closed). Visitors outside that region, including Brazil, are auto-granted and do not see the banner.
Reject all turns off Meta Pixel and CAPI. Google uses Advanced Consent Mode: the four signals (ad storage, ad user data, ad personalization, and analytics) move together.
The choice is stored for 13 months in the consent-choice cookie (granted or denied).
Cookies
The table below reflects cookies planned at launch. Measurement and ads cookies are used only when consent allows it.
| Name | Purpose | Duration | Provider |
|---|---|---|---|
| NEXT_LOCALE | Remembers the chosen language. | As configured by the site | This site |
| geo-consent-region | Marks whether the visitor is in the consent-required region (eu) or the rest of the world (row). | Rewritten on navigation | This site |
| consent-choice | Stores Accept all or Reject all (granted or denied). | 13 months | This site |
| _ga / _ga_* | GA4 measurement via GTM. | 13 months | |
| _gcl_au | Google ads click measurement. | As configured by Google | |
| _fbp / _fbc | Meta Pixel and CAPI measurement (Lead), with no PII. | As configured by Meta | Meta |
Retention
The consent choice is kept for 13 months. Measurement identifiers follow the duration in the table or the provider’s configuration. Erasure requests: use the contact email once it is confirmed.
Your rights
If you are in the EU, EEA, or United Kingdom, you can exercise the rights below and lodge a complaint with CNIL (France) or your local authority.
- Access to personal data.
- Rectification of inaccurate data.
- Erasure.
- Restriction of processing.
- Portability.
- Objection to processing.
- Complaint to a data protection authority.