Privacy policy

What personal data this site collects, why, who processes it, how long it is kept and how to exercise your rights.

Last updated: 20 October 2026.

Who is responsible

A-REX Foundation, the project that maintains A-REX Core, is responsible for the personal data processed through this site (a-rex.pages.dev). For any question or request about your data, write to seanluis47@gmail.com.

This policy applies the Brazilian General Data Protection Law (LGPD, Law 13.709/2018) and, for readers in the European Economic Area, the General Data Protection Regulation (GDPR). It applies to every reader, wherever they are.

When you read the site

The site uses no cookies, no analytics and no advertising trackers. Two preferences are kept in your browser's local storage, the colour theme and the language you chose. They never leave your device, and you can delete them from your browser settings.

Cloudflare hosts the site. To deliver and protect it, Cloudflare processes technical data such as your IP address, browser and the pages requested, under its own privacy policy.

When you request early access

The early-access form asks for:

your name, work email, company, role and country;
the commodities you work with and your use case;
optionally, your GitHub username;
the language of the page you used.

To limit abuse, the site also stores a one-way hash of your IP address combined with the date. It does not store the address itself.

Why we use it, and on what basis

Purpose	Legal basis
Review your request and reply to it	Your consent, given on the form, and steps you asked for before an agreement (LGPD art. 7, I and V; GDPR art. 6(1)(a) and (b))
Give an approved request read access on GitHub	Steps you asked for before an agreement (LGPD art. 7, V; GDPR art. 6(1)(b))
Limit abuse of the form	Legitimate interest in keeping the service available (LGPD art. 7, IX; GDPR art. 6(1)(f))

We do not sell your data, use it for advertising or add you to mailing lists.

Who processes it

Cloudflare hosts the site and stores the requests in its database service.
Resend delivers the notification email that tells the team about a new request, when that notice is turned on.
GitHub receives your username when an approved request is invited to the private repositories.

These providers may process data outside your country. They are bound by their own terms and data protection commitments.

How long we keep it

We keep a request while the early-access programme runs and for up to 24 months after your last contact with us, then we delete it. You can ask us to delete it sooner.

Your rights

You can ask us to confirm whether we process your data, give you access to it or a copy, correct it, delete it, anonymize it or restrict its use, and you can object to its processing or withdraw your consent at any time. Write to seanluis47@gmail.com. We reply within 15 days.

You can also complain to a data protection authority: in Brazil, the ANPD (Autoridade Nacional de Proteção de Dados); in the European Economic Area, the authority of your country.