Privacy Notice

Last updated: September 6, 2026

This notice explains what data this site uses, why it is needed, and how long it is kept.

Who runs this site

Yuri Cunha operates yuricunha.com and is responsible for the data described here. Questions and privacy requests can be sent through the contact page.

The site records basic technical information needed to operate securely and understand general usage. This can include the page visited, referrer, timestamp, browser, operating system, device type, user agent, approximate location, and IP address.

Analytics are handled through an Umami installation served from analytics.yuricunha.com. The site's internal analytics database does not store your plain IP address. It stores a salted, one-way hash so repeat visits can be counted without keeping the original address.

The full IP address may still be used where it is necessary to prevent abuse, apply rate limits, investigate errors, or protect accounts. It may appear temporarily in security, authentication, performance, and error records.

The site does not use advertising trackers or build advertising profiles.

Accounts and public contributions

If you create an account, the site stores the information needed to authenticate you and maintain your profile. This may include your name, email address, username, profile image, authentication provider, session details, and login history. Signing in with Google or GitHub also involves those providers under their own privacy terms.

Comments and guestbook messages are public. They remain visible with your public profile information until they are removed. Guestbook messages may also generate a private Discord notification so Yuri knows that a new message was posted.

When you use the contact form, the site processes your name, email address, subject, and message to deliver and answer your request. The message is sent by email through Resend rather than saved in the site's application database. Cloudflare Turnstile may process technical request data to check for automated spam.

If you subscribe to the newsletter, your email address is stored with Resend until you unsubscribe. A record of the unsubscribe request may be kept so the site does not subscribe you again by mistake.

Yue AI

Your Yue AI conversation history is stored in your browser's local storage. The site does not save the conversation text in its database.

When you send a message, the current message and the recent context needed to answer it pass through the site server to self-hosted AI models. The text is used only to produce the response. It is not used to train or fine-tune a model.

The server keeps content-free operational records such as response time, status, model, estimated token count, endpoint, IP address, and user agent. These records do not contain your prompt or the generated answer.

If you send feedback about an answer, the site stores the rating, any comment you add, technical identifiers for that answer, the current page and language, model information, IP address, user agent, and your account ID when signed in. The rest of the conversation is not included.

Cookies and browser storage

The site uses necessary cookies for language selection and signed-in sessions. Local and session storage may keep your Yue AI history, recent searches, interface preferences, dismissed announcements, and small local features such as game progress. This information stays in your browser unless a feature explicitly sends it to the server.

The site does not use advertising cookies.

How long data is kept

Automated cleanup currently applies these limits:

internal analytics events: 180 days;
performance and AI operational metrics: 30 days;
login attempts: 90 days;
Yue AI feedback: 365 days;
resolved security events: 180 days after resolution;
error logs and error tracking: 180 days, by age.

Unresolved security events may be kept until they are resolved. Errors are removed by age once the retention window passes, whether or not they were marked resolved. Account data and public contributions are kept while the account or contribution remains active. Contact messages are kept only as long as reasonably needed to handle the conversation. Newsletter data is kept until you unsubscribe, subject to a limited suppression record.

Backups may retain deleted data for a limited period until they rotate out.

Service providers

The site relies on a small number of services to operate: Vercel for hosting, Upstash for rate limiting and cache, Resend for email and newsletter delivery, Cloudflare for Turnstile and related infrastructure, and Google or GitHub when you choose social sign-in. These services receive only the information needed for their role and may process it in other countries under their own privacy and security terms.

The AI models used by Yue AI are self-hosted. Chat messages are not sent to a third-party AI provider.

Why data is processed

Depending on the feature, data is processed to provide something you requested, protect the site and its users, keep the service reliable, understand aggregate usage, send communications you asked for, or comply with legal obligations. Newsletter messages rely on your choice to subscribe, which you can withdraw at any time.

Your choices and rights

You can ask whether the site holds personal data about you and request access, correction, deletion, portability, restriction, or information about how it was used or shared, where applicable. You can also object to certain processing or withdraw consent.

Signed-in users can correct their profile and email, download a portable JSON copy of supported account data, or request permanent account deletion from settings. The export only contains allowlisted personal data tied to the authenticated account. It excludes authentication tokens, passwords, security logs, internal metrics, quotas, administrative data, and other users' data. Account deletion requires a verified email and a time-limited confirmation link; it is not available through this automated flow for anonymous or administrative accounts.

For restriction, objection, consent withdrawal, records not covered by the automated export, or requests from people without an account, use the contact page. Identity may need to be verified before data is disclosed or changed. You may also contact the Brazilian National Data Protection Authority (ANPD) or the data protection authority where you live.

What this site does not do

It does not sell personal data.
It does not use personal data for targeted advertising.
It does not use Yue AI conversations to train models.
It does not make decisions with legal or similarly significant effects about visitors through automated profiling.

Changes to this notice

This notice may change when the site's features or data practices change. The date at the top shows the latest revision.