Privacy
This policy covers two things: this site (dop-t.com) and the DOP platform — the product you sign in to. It is written by the person who runs both, in plain language, and it says only what is true today. When something changes, the date at the top changes with it.
Who is responsible
DOP is conceived and run by Ed Barros, an individual, in Brazil. For anything in this policy, write to ed.barros@digitalbusinessone.com.
This site
The site is static, served by GitHub Pages. It has no accounts, no forms and no comments.
Analytics. The site uses Google Analytics 4 to count visits and see which
pages are read. It sets cookies named _ga and _ga_* on your browser,
records the page, the approximate region, the browser and the device type, and
truncates your IP address before storing anything. If your browser sends the
Do Not Track signal, the script is not loaded at all. You can also block it
with any content blocker; the site works the same without it. Google’s own
terms for the data it processes on our behalf are at
policies.google.com/privacy.
Fonts. The typefaces are served from this domain, not from Google Fonts. Rendering a page makes no request to a third party.
Server logs. GitHub Pages keeps the ordinary access logs of a web server (IP address, requested URL, time, user agent) under GitHub’s own policy. We do not receive them.
Nothing else. No advertising, no pixels, no fingerprinting, no data brokers.
The DOP platform
The platform is pre-release. Signing in is possible only for people we have invited; this section describes what happens when you do.
What we collect at sign-in. You sign in with an e-mail address and a password, or through Google or GitHub. From the provider we receive your name, e-mail address and profile picture — nothing else; we do not ask for access to your calendar, your contacts or your repositories through sign-in. Authentication is handled by Google Cloud Identity Platform on our behalf.
What we collect while you use it. The platform records what you do inside it as a log of events — an account created, a demand opened, a specification approved, a pull request delivered — with who did it and when. That log is the product: it is how you and the agent see the same history. It stays inside your account.
Credentials you give the platform (a token for GitHub or GitLab, for example) are stored encrypted in Google Cloud Secret Manager, used only to do what you asked, and never shown back in full.
Where it lives. On Google Cloud, in the United States (us-central1),
under our own project. We do not sell data, we do not share it with anyone
outside the providers named here, and we do not use it to train models.
Google user data. Data received through Sign in with Google is used only to create and identify your account, and the platform’s use of it complies with the Google API Services User Data Policy, including the Limited Use requirements.
Deleting it. Write to the address above from the e-mail your account uses, and the account and everything under it are deleted. While the platform is pre-release this is done by hand; it will be a button.
Your rights
Under the Brazilian General Data Protection Law (LGPD) and, where it applies, the GDPR, you may ask what we hold about you, ask for it to be corrected or deleted, and withdraw a consent you gave. The address above is the channel; you will get an answer from a person.
Children
Neither the site nor the platform is directed at anyone under 18.