Privacy Policy

1. About this Policy and who it applies to

1001Ferramentas is a free hub of more than eighteen thousand online tools — calculators, generators, converters, validators, text and SEO utilities — spread across eleven categories and available without registration.

This Policy explains, in plain language, which personal data we process when you use 1001ferramentas.com (including the English section under /en), for what purpose, on which legal basis, who we occasionally share it with and what rights you have. It covers every page and every tool on the site.

The terms used here follow Brazil's General Data Protection Law (Law No. 13.709/2018, the “LGPD”) and, where applicable, the European GDPR. In short: personal data is any information that identifies you or could identify you; the data subject is you; the controller is whoever decides how and why data is processed; processing is any operation on that data, from collection to deletion.

The rules for using the service itself are in our Terms of Use, which complement this Policy.

2. Who the controller of your data is

The controller of the personal data processed on this site is the operator of 1001Ferramentas, who also performs the role of Data Protection Officer (DPO) set out in Art. 41 of the LGPD.

Contact: [email protected], or the contact page. Channels and response times are detailed in section 19.

3. What personal data we process

We process only what is needed to serve, protect and fund the site. There is no account system, so there is no registration data, no profile and no usage history tied to a person.

We do not process sensitive data (racial origin, religious belief, political opinion, health, biometrics and the other categories in Art. 5, II of the LGPD) and we never ask you to provide any.

4. What you type into the tools

This is the part that matters most on a site like this one, so it gets its own section.

In the vast majority of the tools, the entire computation runs in JavaScript on your own device. The page is delivered by our server, and from that point on the work happens in your browser: what you type is never sent anywhere, is not logged, and is gone as soon as you close the tab.

• We have no upload endpoint. There is no route on our server that receives your content, so there is nothing for us to store even by accident.
• We do not sell, rent or transfer what you type to anyone.
• Your input does not feed advertising. Nothing you enter in a tool is sent to advertisers or used to target ads.
• We do not try to identify you from what you type, and we do not cross-reference it with browsing data.

There is one honest exception. A handful of tools need live data that only a third party has, so they query a public API directly from your browser. In those cases the request goes straight from you to that provider, under its own privacy policy, and carries your IP address:

Even with client-side processing, a sensible rule holds everywhere: do not paste production secrets, credentials or third-party data into any website — including this one — unless you have a reason to.

5. What we use data for, and on which legal basis

Every processing operation needs a legal basis under Art. 7 of the LGPD (and Art. 6 of the GDPR where it applies). These are ours:

Where we rely on legitimate interest, we assess beforehand whether the purpose is concrete, whether the data used is the minimum necessary and whether your reasonable expectation is respected. You may object to that processing through the channels in section 19.

6. Cookies and similar technologies

Cookies are small files written by your browser. Alongside them, this site and its partners may use equivalent technologies — web beacons, browser local storage, device identifiers and your IP address.

Worth stating plainly: we set no cookies of our own. The site has no login and no server-side session, so every cookie below comes from Google.

The names, purposes and durations of third-party cookies are defined by those companies and may change without notice to us. The current list of Google cookies is at policies.google.com/technologies/cookies. Our Cookie Policy covers the same ground in a shorter form.

7. Advertising and Google AdSense

The site shows advertising so it can stay free, with no paywall and no usage limits. We work with Google AdSense (publisher ID ca-pub-4910693890169417).

• Third parties set and read cookies in your browser. As a consequence of serving ads, third parties — including Google — may write and read cookies on your device and use web beacons and your IP address to collect information. This happens whether or not you click an ad.
• The DART cookie and equivalents. As a third-party vendor, Google uses cookies to serve ads on this site. The DoubleClick DART cookie, and equivalents, allow Google and its partners to serve ads based on your visits to this site and/or other sites on the internet.
• Other ad networks. Third-party vendors may likewise serve ads here and use cookies, web beacons and IP addresses to measure ad effectiveness and personalize what you see. We do not control those technologies, and their handling of data is governed by their own privacy policies.
• What you type stays out of it. As stated in section 4, nothing you enter in a tool is shared with advertisers or used to target ads.

You can turn off personalized advertising:

• In your Google Ad Settings, which apply across every site using Google's network;
• For third-party vendors, at aboutads.info/choices, optout.networkadvertising.org or, in the EU, youronlinechoices.eu;
• By blocking third-party cookies in your browser (section 15).

For visitors in the EEA and the UK, ads and cookies are governed by a consent tool (Google Funding Choices) in line with Google's EU user consent policy. Turning off personalization does not remove the ads — they are simply served in non-personalized form, based on the content of the page rather than your history. More detail in Google's advertising policies and in how Google uses data when you use its partners' sites.

8. Who we share data with

We do not sell personal data. Sharing happens only with the processors and partners the site needs in order to work:

We may also share data to comply with a court order, a request from a competent authority or a legal obligation, and to exercise our rights in administrative, judicial or arbitration proceedings.

9. International data transfers

Some of the partners listed in section 8 — notably Google and Cloudflare — are headquartered or operate servers outside Brazil, including in the United States. Using the site therefore involves some data being transferred internationally.

Those transfers rely on the grounds in Art. 33 of the LGPD, in particular the need to perform the service you requested and the satisfaction of legitimate interests, and on the contractual guarantees and standard contractual clauses those vendors offer in their terms of service. For visitors in the EEA and the UK, the same transfers are covered by the Standard Contractual Clauses under the GDPR.

10. How long we keep data

Once the period or the purpose ends, data is deleted or anonymized, except where retention is permitted by Art. 16 of the LGPD — for instance to comply with a legal obligation or to exercise rights.

11. Information security

We take technical and administrative measures proportionate to the size of the service and to the data involved:

• Encryption in transit — all traffic uses HTTPS, with HSTS enabled;
• Content Security Policy restricting which domains may run scripts, load images or open connections;
• Security headers applied site-wide to reduce the attack surface;
• Rate limiting of 200 requests per IP every 15 minutes, to contain abuse and automated traffic;
• A 10 KB limit on request bodies;
• No personal-data store — the smallest attack surface is the data that was never collected.

No system is completely immune to incidents. If a security incident poses a relevant risk to your rights, we will notify you and Brazil's National Data Protection Authority (ANPD) as required by Art. 48 of the LGPD.

12. Your rights under the LGPD

Art. 18 of the LGPD guarantees you, free of charge and at any time, the right to obtain:

• Confirmation that your data is being processed;
• Access to the data we hold about you;
• Correction of incomplete, inaccurate or outdated data;
• Anonymization, blocking or deletion of unnecessary or excessive data, or data processed unlawfully;
• Portability to another provider, on express request;
• Deletion of data processed on the basis of your consent;
• Information about the public and private entities we share data with;
• Information about your option not to consent and the consequences of refusing;
• Withdrawal of consent, where processing relies on it;
• Objection to processing based on legitimate interest, if you believe it breaches the law.

You may also petition the ANPD and consumer protection bodies directly.

13. Your rights under the GDPR (EEA and UK)

If you are in the EEA or the UK, the GDPR gives you the rights of access, rectification, erasure, restriction of processing, portability, objection and withdrawal of consent, as well as the right to lodge a complaint with your supervisory authority. The legal bases (Art. 6) are consent and legitimate interests, as set out in section 5.

In those regions, analytics and advertising cookies are only set after you agree in the consent banner, and you can change that choice at any time. Data may be transferred to Google in the United States under appropriate safeguards such as the Standard Contractual Clauses.

14. How to exercise your rights

Write to [email protected] or use the contact page, describing what you want.

One practical caveat: because there is no sign-up and we keep no database of personal data, there is usually no record on our side to access, correct or delete — which is the point of the design. For data held by Google under its own controllership (analytics and advertising), the fastest routes are the opt-outs in section 7 and Google's own privacy controls.

We reply within 15 days of receiving a request. We may ask for additional information to confirm your identity before acting on access or deletion requests — a safeguard in your favor.

15. Managing cookies in your browser

You can block, limit or delete cookies at any time in your browser settings. Since we set none of our own, blocking them does not break any tool on this site.

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Edge

Most browsers also offer private browsing and an option to block third-party cookies by default — the latter disables most of the advertising tracking described in section 7. You can opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on. To clear preferences a tool stored on your device, clear your browser's site data for 1001ferramentas.com.

16. Children and teenagers

This site is not directed at children, and we do not knowingly collect personal data from minors. Since the tools require no registration, no data identifying a user of any age is collected in the first place.

If we find that a minor has provided us with data without the specific consent of a parent or legal guardian, as required by Art. 14 of the LGPD, that data will be deleted. Guardians who suspect this has happened can write to us through the channels in section 19.

17. Links to third-party sites

Our pages link to external sites — reference sources, documentation, partner policies and the ads themselves. Once you follow one of those links, you are governed by the privacy policy of the destination site.

We have no control over the content, collection practices or tracking technologies of those sites, and we are not responsible for them. We recommend reading the privacy policy of any service before providing data to it.

18. Changes to this Policy

We may update this Policy to reflect changes to the site, to the technologies in use or to the law. The last-updated date and version number always appear at the top of this page, and the version in force is the one published here.

Material changes — a new processing purpose or a new recipient of data, say — will be highlighted on the site before they take effect. Continued use of the site after publication means you are aware of the updated version.

19. Data officer and contact channels

Questions, requests and complaints about privacy and data protection should be addressed to the Data Protection Officer (DPO):

• Officer: the operator of 1001Ferramentas
• E-mail: [email protected]
• Form: contact page

Response time: up to 15 days. If your request is not resolved to your satisfaction, you may file a complaint with the National Data Protection Authority or, in the EEA and the UK, with your local supervisory authority.

For the rules governing use of the service, see our Terms of Use and Cookie Policy. To learn what the site is and who is behind it, see About.