Privacy policy

Cantim Café is responsible for the data handled on this site. For any question or request about personal data, write to cantimcafe@gmail.com.

Until you accept, no analytics tool is loaded and no browsing data is sent for analytics. The map is an exception: it loads only if you click to open it, as explained in the Cookie policy.

If you accept, we use Google Analytics to understand how the site is used: pages visited, language chosen, whether you arrived through the QR code on the machine, and clicks on links such as Google and Instagram. This is browsing data. It does not identify you by name. The survey opens an external Google Form, which has its own privacy information.

When our staff assists you, we may record internal service notes, an external CRM identifier and the last 4 digits of the card used, solely to locate your history in case of a question or refund. We never record the full card number, expiry date, password or CVV.

When you confirm your Google identity for the newsletter, support or another identified feature, we create or update one unified profile with your email, name and photo when available, plus the channels you used. Only authorized dashboard paths can access that profile.

If you check the consent box and submit your email or confirm your Google identity, we store your email address, language, sign-up method and consent version/date to record your choice. Google confirmation also links the newsletter to your unified profile. Email-only sign-ups remain pending for up to 30 days; we are not sending messages or email confirmations now.

A confirmed subscription is deleted after 12 months without renewed consent. Cancellation or expiry deletes only the subscription and its consent. Your profile and service history are retained while you remain an active customer; request deletion through the privacy contact.

The map shown on this site uses OpenStreetMap data. Map © OpenStreetMap contributors. When you open Google's map, your browsing data is sent to Google.

We store your analytics and diagnostics choice and theme preference in your browser. Google sign-in also keeps the dashboard session in this browser until you sign out.

To know what works on the site and what does not. How many people arrive by QR code, which pages get read, in which language. None of it is used for advertising.

Optional analytics and diagnostics reports depend on your consent. The newsletter also stores your email only after separate consent and can be cancelled at any time, without losing access to the website or dashboard.

Recording service notes and payment identification (last 4 card digits) rests on our legitimate interest in providing support and resolving billing questions, limited to what that purpose needs.

Google, which operates Google Analytics, and only if you have accepted. Google handles that data under its own policies. Newsletter sign-ups are stored in Firebase (Google) and are not shared with an email delivery platform at this stage.

With your permission, we also use Sentry to diagnose technical failures. We send the error type, its code location and the page identifier. We remove free-form messages, user data, tokens, screen contents and financial figures from reports. We do not record sessions. Connecting to the service involves your IP address and technical browser information; the ingestion destination is in the United States. Retention depends on the Sentry project settings.

Browsing data stays in Google Analytics for the retention period configured there. Pending newsletter sign-ups expire within 30 days; confirmed sign-ups expire after 12 months without renewed consent. Cancellation or expiry deletes only the subscription and its consent. Your profile and service history are retained while you remain an active customer; request deletion through the privacy contact. Browser choices stay until you clear or change them.

Service notes and payment identification stay on file while you remain an active customer. You can request deletion at any time through the privacy contact below.

Brazilian law gives you the right to confirm processing, access, correct, anonymise, block and delete data, and to withdraw consent. To exercise any of them, write to cantimcafe@gmail.com.

One honest note: the analytics data we collect is browsing data and does not identify you. In practice that means we cannot look up “your data” from a name or an email, not because we refuse, but because that link does not exist. What you can always do is withdraw consent, and we stop collecting.

Use “Cookie preferences” in the website or dashboard footer. This clears your previous choice and stops new analytics and diagnostics reports. Reports already sent remain subject to the service retention period.

This site is not directed at children, and we do not knowingly collect data from minors.

If this policy changes, the date at the top changes with it. Significant changes will be flagged on the site.