Privacy Policy

Last updated 2 September 2026.

1. Controller

Vagalerta is the controller of the data described here and can be reached at [email protected], which is also the channel for exercising your rights and for the data protection officer.

2. What we collect

• Email address, provided by you when creating an alert.
• Federal Police unit and service you chose to watch, and your interface language.
• An additional notification channel, only if you opt in: a Telegram conversation identifier or a browser push subscription.
• Minimal technical logs: IP address, browser identification and access timestamps, kept for security and abuse prevention under Brazil's Internet Civil Framework.
• Delivery records: whether a notification was sent, when, and for which alert.

We collect no sensitive data, request no documents, and have no access to your Federal Police case.

3. Why, and on what legal basis

• Sending the alert you asked for — consent, LGPD art. 7(I). This is the primary purpose, and consent is given when you create the alert.
• Security, fraud and abuse prevention — legitimate interest, art. 7(IX).
• Compliance with legal obligations where applicable — art. 7(II).

We do not use your data for advertising, profiling, or automated decisions about you.

4. Sharing

We do not sell, rent or trade data. We share only with processors necessary to run the service, and only as far as necessary: hosting and infrastructure providers, the email delivery provider, and, if you opt into that channel, the corresponding messaging platform. We may also disclose data under a court order or a request from a competent authority.

5. International transfer

The infrastructure hosting the service and delivering messages is located outside Brazil, including the United States and the European Union. The data described above is therefore transferred internationally, under LGPD art. 33 and the contractual terms of those providers.

6. How long we keep it

• For as long as your alert is active.
• After cancellation, alert data is deleted within 30 days.
• Immediate deletion can be requested at any time via the contact address.
• Technical access logs are kept for the applicable statutory period, then deleted.

7. Your rights

Under LGPD art. 18 you may request confirmation of processing, access, correction, anonymisation, portability, deletion, information about sharing, and withdrawal of consent. Write to [email protected] and we respond within 15 days. Withdrawing consent ends the alert, because the alert cannot exist without it.

Cancelling is immediate and does not depend on us: every message we send carries an unsubscribe link.

8. Cookies and local storage

We use no advertising cookies and no third-party trackers. The site may store preferences such as your chosen language in your own browser; that information never leaves your device.

9. Security

Traffic is served over HTTPS only, administrative access is restricted and authenticated, and we deliberately collect as little as possible: the best protection for a piece of data is not holding it. No system is completely immune, and in the event of a significant incident we notify affected users and the ANPD under LGPD art. 48.

10. Minors

The service is not directed at people under 18. If we identify such a registration without guardian consent, the alert is deleted.

11. Changes

We may update this policy. The date at the top indicates the current version, and material changes are emailed to anyone with an active alert.