Privacy Policy

1. Data controller

Brainjuice Labs, LDA, a Portuguese private limited company with offices at Campus da Penteada, 9020-105 Funchal, Madeira, Portugal, is the controller of personal data processed via this site.

Contact for privacy matters: privacy@brainjuicelabs.xyz.

2. What data we collect

We collect only what we need:

• Contact form submissions: name, email, company (optional), the track you select, and the content of your message.
• Technical data: IP address, browser type, device type, referring URL, and pages viewed. Captured by hosting and analytics providers (see §6).
• Easter-egg leaderboard: three-character initials and a score, when you choose to submit a run on /ship-it. Initials and scores are public.
• Email correspondence: the content of any email you send us.

We do not knowingly collect data from children under 16. If you believe a child has provided us data, contact us and we will delete it.

3. Why we process it (legal bases)

• To respond to inquiries sent via the contact form or email: processing necessary to take steps at your request prior to entering a contract (Art. 6(1)(b) GDPR) or legitimate interest in operating our business (Art. 6(1)(f)).
• To operate and secure the site: legitimate interest in keeping the service running, preventing abuse, and detecting fraud (Art. 6(1)(f)).
• To comply with legal obligations, including tax, accounting, and lawful requests from authorities (Art. 6(1)(c)).
• For optional analytics or marketing, where applicable, only with your consent (Art. 6(1)(a)). You may withdraw consent at any time.

4. How long we keep it

• Contact-form submissions: up to 24 months from last interaction, unless a commercial relationship requires longer retention.
• Email correspondence: as long as needed to handle the matter and meet legal record-keeping obligations.
• Server logs: typically 30 to 90 days, then deleted or anonymized.
• Leaderboard initials and scores: retained while the feature exists; deletion on request.

5. Who we share it with

We share personal data only with:

• Service providers (processors) acting on our instructions under written agreements: hosting (Netlify, Inc.), email delivery, analytics, and similar infrastructure.
• Authorities where required by law, court order, or to defend our legal rights.
• Successors in the event of a merger, acquisition, or asset transfer, subject to equivalent protection.

We do not sell personal data.

6. International transfers

Some processors may be located outside the European Economic Area (notably the United States). When that happens, we rely on appropriate safeguards under Chapter V of the GDPR, typically the European Commission's Standard Contractual Clauses or an adequacy decision. You can request a copy of the safeguard in place by contacting us.

7. Cookies and similar technologies

We use a minimal set of cookies and local-storage entries strictly necessary to operate the site (e.g., remembering UI tweaks or game progress). Where we use any non-essential cookies (for example, analytics or marketing), we will request your consent first and offer a way to withdraw it.

8. Your rights

Subject to the GDPR, you have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your data (“right to be forgotten”), subject to legal exceptions;
• restrict or object to processing based on legitimate interest;
• data portability for data you provided under contract or consent;
• withdraw consent at any time, without affecting the lawfulness of prior processing;
• lodge a complaint with the Portuguese supervisory authority, Comissão Nacional de Proteção de Dados (CNPD), cnpd.pt, or with the supervisory authority in your EU country of residence.

To exercise your rights, email privacy@brainjuicelabs.xyz. We will respond within one month of a verified request, as required by Art. 12 GDPR.

9. Security

We apply technical and organizational measures appropriate to the risk: encryption in transit (HTTPS), access controls, least-privilege principles for our team, and audited third-party providers. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but we do our best to protect your data.

10. Changes to this Policy

We may update this Policy. The effective date at the top reflects the most recent version. Material changes will be highlighted on the site.

11. Governing law and forum

This Policy is governed by Portuguese law, in particular the GDPR and Law 58/2019. Any dispute that cannot be resolved amicably shall be submitted to the exclusive jurisdiction of the courts of the judicial district of Funchal (Tribunal Judicial da Comarca da Madeira, Funchal), Portugal, without prejudice to mandatory consumer-protection rights you may have in your country of residence.

12. Contact

Brainjuice Labs, LDA
Campus da Penteada, 9020-105 Funchal, Madeira, Portugal
privacy@brainjuicelabs.xyz