Legal

Privacy notice

This notice explains how Common Hour (“the imprint”) handles personal data. It covers this website and any digital publication sold through it. The controller is Common Hour, operating from Brazil, contactable at support@commonhour.site.

Data collected

• Correspondence data. The email address and message content of anyone who writes to the imprint.
• Purchase data. Where a publication is bought, the payment processor supplies the imprint with the buyer’s name, email address, order reference, and country. Full card numbers are never received or stored by the imprint.
• Technical data. Server logs recording IP address, user agent, referring page, and timestamp, generated automatically by the hosting provider.
• Measurement data. Aggregate page-view counts, where a measurement tool is in use.

No sensitive personal data as defined by the LGPD or special-category data as defined by the GDPR is collected, and no profiles are constructed about individual readers.

Legal bases

• Performance of a contract (LGPD Art. 7, V; GDPR Art. 6(1)(b)) — for delivering a purchased publication and handling refunds.
• Legitimate interests (LGPD Art. 7, IX; GDPR Art. 6(1)(f)) — for answering correspondence, keeping the site secure, and understanding aggregate traffic. The interest is balanced against reader rights and does not extend to profiling.
• Legal obligation (LGPD Art. 7, II; GDPR Art. 6(1)(c)) — for retaining transaction records where tax or accounting law requires it.
• Consent (LGPD Art. 7, I; GDPR Art. 6(1)(a)) — for any non-essential cookie or optional communication. Consent may be withdrawn at any time.

Retention

• Correspondence: up to 24 months from the last message, then deleted.
• Purchase records: retained for the period required by Brazilian tax and commercial law, counted from the transaction.
• Server logs: retained by the hosting provider under its own schedule, generally short.
• Aggregate measurement data: retained in aggregate form only, and not linked to an individual.

Sharing

Personal data is shared only with processors that make the service work: the hosting provider, the email provider, and the payment processor. Each acts under contract and on instruction. Data is not sold, rented, or exchanged for advertising purposes. Disclosure to a public authority occurs only where a valid legal obligation applies.

International transfers

Hosting and email infrastructure may process data outside Brazil, including in the European Union and the United States. Transfers are made under mechanisms recognised by LGPD Art. 33 and, where the GDPR applies, under standard contractual clauses or an adequacy decision.

Cookies

This site sets no advertising cookies and requires no cookie for reading. Any cookie present is either strictly necessary for a purchase flow or, where a measurement tool is used, set only with consent. Browser settings can block or clear cookies without affecting access to the library.

Rights

Under LGPD Art. 18 and GDPR Arts. 15–22, a data subject may request confirmation of processing, access, correction, anonymisation or deletion, portability, information about sharing, and withdrawal of consent, and may object to processing based on legitimate interests.

Requests go to support@commonhour.site and are answered within 15 days under the LGPD and one month under the GDPR. Identity verification may be requested where necessary to prevent disclosure to the wrong person.

Complaints

A complaint may be lodged with the Autoridade Nacional de Proteção de Dados (ANPD) in Brazil or, where the GDPR applies, with the supervisory authority of the data subject’s member state.

Children

This site is intended for adults and is not directed at anyone under 18. Personal data is not knowingly collected from minors; where such data is identified, it is deleted.

Changes

Material changes to this notice are published on this page with a revised review date.

Last reviewed: August 2026