Privacy notice

Last updated: 3 November 2026

This notice explains what personal data Panorama (https://panoramahoje.com) uses, why, for how long and how to exercise your rights under the UK GDPR and the Data Protection Act 2018. It describes what the site actually does today.

1. Controller

Operator: LPA Tech
Registered name: LPA TECH LTDA
Represented by: Leandro Pereira Alexandre
Company number (Brazil): CNPJ 64.939.235/0001-26
Postal address: Rua Moe, 397, apto 116, Vila Ré, São Paulo - SP, CEP 03660-040, Brasil
Email: contato@lpatech.com.br
Telephone: +55 11 4220-6203

Privacy requests: contato@lpatech.com.br.

2. At a glance

You don't need an account to read the site.
We use Google advertising cookies only with your consent.
We only ask for personal data if you sign up to the newsletter.
We don't sell personal data.

3. What we use and why

3.1 Server logs

The site runs on Cloudflare's network. Each request reaches Cloudflare with your IP address, the time, the page requested, your browser type (user agent) and an approximate country. We use this to deliver pages, protect the site and fix faults. Our execution logs are deleted automatically within 7 days. Lawful basis: our legitimate interests in running a secure website (Article 6(1)(f)).

To stop abuse of the newsletter form and the admin login we store a keyed cryptographic hash of your IP address, never the address itself, for up to 2 days.

3.2 Newsletter

If you sign up we store your name, email address, edition, chosen topics, town and star sign (optional), the version of the consent wording you accepted, a hash of your IP address at sign-up (as evidence of consent), sign-up, confirmation and unsubscribe dates, and a log of each send (date and outcome).

Purpose: sending the digest you chose and the confirmation email.
Lawful basis: consent (Article 6(1)(a); PECR regulation 22).
Double opt-in: nothing is sent except the confirmation email until you click its link.
Unsubscribing: a link in every email, effective immediately, including your email app's own "unsubscribe" button.
Retention: while your subscription exists. After you unsubscribe we keep only a suppression record (email, status, date) so we never email you again. Unconfirmed sign-ups remain on file as pending. To have everything erased, including that record, email contato@lpatech.com.br.

3.3 Emails to us

If you write to us, we use your address and message only to reply, and keep them only as long as needed to deal with it. Lawful basis: legitimate interests.

3.4 Cookies

Consent cookies remember your choice, and Google sets advertising cookies if you consent. See the Cookie policy.

3.5 Our own ads

Ads we sell directly are chosen by page topic, with no cookies and no visitor profile. We only count total views and clicks per ad.

Google advertising (AdSense)

This site shows ads served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.

You can opt out of personalised advertising in Google Ads Settings, or opt out of other vendors' cookies for personalised advertising at www.aboutads.info or www.youronlinechoices.eu. How Google uses information from sites that use its services: policies.google.com/technologies/partner-sites.

Ad networks that may serve ads here: Google AdSense (Google LLC, privacy policy). Through AdSense, other Google-certified ad networks may also take part; the consent message lists every vendor and lets you choose.

Visitors in the UK see Google's consent message, with "Consent", "Do not consent" and "Manage options". No advertising cookies are set until you consent. Lawful basis: your consent (UK GDPR Article 6(1)(a) and PECR regulation 6), which you can withdraw at any time via "Cookie settings" in the footer.

4. External data sources

Weather, football and market calendars are fetched by our server, which keeps a temporary copy. Your browser never connects to MET Norway, the Japan Meteorological Agency, football-data.org or OpenLigaDB, and none of your data is sent to them. See our sources.

5. Who receives data

Cloudflare, Inc.: hosting, content delivery, database and logs (privacy policy).
Amazon Web Services (Amazon SES): sends newsletter emails; receives your name, email address and the message (privacy policy).
Stripe Payments Europe, Limited (Ireland) and Stripe, Inc. (USA): process Premium payments; receive your name, email address, card or wallet details, billing country and IP address. We never see your full card number. Legal basis: performance of the contract (Article 6(1)(b) UK GDPR) (privacy policy).
Google LLC: advertising, as described above (privacy policy).

Otherwise we only disclose personal data where the law or a court order requires it.

6. International transfers

These providers process data outside the UK, including in the United States. Transfers rely on the safeguards they offer, such as the UK Extension to the EU-U.S. Data Privacy Framework or standard contractual clauses with the UK Addendum.

7. Your rights

You have the right to access your data, have it corrected or erased, restrict or object to its use, receive it in a portable format, and withdraw consent at any time without affecting earlier processing. Email contato@lpatech.com.br; we reply within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).

8. Security

The whole site uses HTTPS. Admin passwords are stored as strong hashes, session and confirmation tokens are never stored in plain text, and admin activity is logged.

9. Children

The site isn't aimed at children and we don't knowingly collect their data.

10. Changes

When this notice changes, the date at the top changes too.