In short: Kwyper collects very little. We have no analytics, no advertising cookies and no tracking scripts on the site. We hold what you send us through the contact form, what you write in a comment, and the standard server logs our host keeps. This page says exactly what that means, why we hold it, how long we keep it, and how to make us delete it.
Effective date: 16 September 2026
Who we are
Kwyper.com is owned and run by Ranqueei Digital LTDA, a limited company registered in Brazil under CNPJ nº 54.823.192/0001-65, with its registered office at R. Adelino Cardana, 293, Sala 603, Bloco C, Bethaville I / Centro, Barueri/SP, CEP 06401-147, Brazil.
We are the data controller for the personal data described here. A controller is the party that decides why and how your data is used. You can reach us about anything on this page at [email protected].
Under Brazilian law we must name the person responsible for data protection, known as the encarregado. Our encarregado is [OWNER: add the name of the encarregado / data protection officer] and is reached at [email protected].
We are established in Brazil, not in the European Union. Non-EU controllers sometimes have to appoint a representative inside the EU under Article 27 of the GDPR. [OWNER: add the name and address of an EU Article 27 representative here, or remove this sentence if you have taken advice that the Article 27(2) exemption applies to Kwyper.]
What we collect and how
There are only three ways personal data reaches us. We are not describing a template here. These are the only collection points that exist on the site as of the effective date above.
The contact form and emails you send us. Our Contact form asks for your name, your email address, a topic and your message. The form is handled by Web3Forms, which passes it straight to our inbox. If you email us directly instead, we hold your email address, your message and anything you attach.
Comments. If commenting is open on an article and you leave a comment, WordPress stores the name and email address you type, the comment itself, your IP address and your browser user agent string. The IP address and user agent are used to catch spam. Your name and comment are published. Your email address is not published.
If your email address has a Gravatar account, a scrambled version of it is sent to Gravatar so your avatar can be shown next to your comment. Gravatar is run by Automattic and you can read their privacy policy.
Server logs. Like every website, our server writes a line each time a page is requested. That line holds your IP address, the date and time, the page you asked for, the page you came from and your browser user agent. We use these logs to keep the site up, to investigate errors and to deal with attacks. We do not use them to build a profile of you.
What we do not collect. We run no analytics package. There is no Google Analytics, no Google Tag Manager and no other measurement script on Kwyper. We run no advertising on the site, so no advertising cookies are set and no ad network profiles you here. We do not ask for your date of birth, your location, your payment details or anything a privacy law would class as sensitive. We have no newsletter and no account system for readers.
Why we use it and on what legal basis
A legal basis is the reason the law allows us to use your data. The table lists ours under the GDPR (which covers the EU, the EEA and, in its UK form, the United Kingdom) and under the LGPD, Brazil’s data protection law.
| What we do | Why | GDPR basis | LGPD basis |
|---|---|---|---|
| Read and answer your contact form message | To reply to you | Consent, Article 6(1)(a), given by ticking the box on the form | Consent, Article 7, I |
| Read and answer an email you send us | To reply to you | Legitimate interests, Article 6(1)(f): handling correspondence you started | Legitimate interests, Article 7, IX |
| Publish your comment with your name | To run a comment section | Consent, Article 6(1)(a) | Consent, Article 7, I |
| Keep the IP address and user agent behind a comment | Spam and abuse prevention | Legitimate interests, Article 6(1)(f) | Legitimate interests, Article 7, IX |
| Keep server logs | Security, uptime and debugging | Legitimate interests, Article 6(1)(f) | Legitimate interests, Article 7, IX |
| Keep access records for six months | Required of Brazilian internet application providers by Article 15 of the Marco Civil da Internet | Legal obligation, Article 6(1)(c) | Legal obligation, Article 7, II |
| Keep a record of a privacy request and what we did | To show we handled it properly | Legal obligation, Article 6(1)(c) | Legal obligation, Article 7, II |
Where we rely on legitimate interests, we have weighed our interest against your privacy. You can object to that use at any time, and we explain how below.
Cookies
A visit to Kwyper sets no cookies at all. We checked this, and the site sends no cookie to a reader who simply loads a page. Cookies appear only if you tick the box that saves your details when you leave a comment, or if you are a member of staff logged in to the site. There are no analytics or advertising cookies because we run neither. The full list, with names and durations, is in our Cookie Policy.
Third parties we use
These are the only outside companies that can see data connected to your visit. Each one is a processor acting on our instructions, or a provider whose server your browser contacts to load part of a page.
- Hostinger International Ltd hosts the site on servers in São Paulo, Brazil, and writes the server logs described above. Privacy policy.
- Web3Forms, run by Web3Creative, receives your contact form message and forwards it to our inbox. Privacy policy and data processing agreement.
- Automattic runs Gravatar, which supplies comment avatars and therefore receives your IP address and a scrambled form of your email when an avatar loads. Privacy policy.
- Unsplash and Pexels serve some of the photographs on our pages from their own servers, which means those servers see your IP address and user agent when an image loads.
We do not sell your data to anyone, and we do not hand it to data brokers, advertisers or AI training companies. We will disclose data if a court or a regulator with authority over us requires it, and we will tell you when we are allowed to.
International transfers
We are a Brazilian company and the site runs on Brazilian servers, so if you are in Europe your data leaves the EU when you contact us. Two things cover that. First, on 26 January 2026 the European Commission adopted an adequacy decision for Brazil, which means personal data can move from the EU to Brazil without extra contract clauses because Brazilian law is treated as offering equivalent protection. Second, where a provider we use sits outside Brazil and outside your country, we rely on the contract terms in that provider’s data processing agreement, which include the European Commission’s standard contractual clauses.
If you want to know which safeguard applies to a specific piece of your data, ask us and we will tell you.
How long we keep data
| Data | Kept for |
|---|---|
| Contact form messages and emails | Up to 24 months after the matter is closed, then deleted from our inbox. Web3Forms deletes its own copy of a submission after three years at the latest. |
| Comments and the name and email attached to them | As long as the article is published, or until you ask us to remove the comment. |
| IP address and user agent stored with a comment | 12 months. |
| Server and access logs | Up to six months. |
| Records of privacy requests | 24 months, so we can show a regulator how we handled the request. |
Your rights
Whoever you are and wherever you live, you can email [email protected] or use the contact form and ask us what we hold about you, ask us to fix it, or ask us to delete it. Those are two separate channels and either one works. We answer inside the time limit set by the law that applies to you, which is normally one month in the EU, the UK and Brazil, and 45 days in California and other US states. We will ask you for enough information to be sure the request is really yours, and we do not charge for it.
If you are in the EU, the EEA or the UK
The GDPR and the UK GDPR give you the right to:
- get a copy of the personal data we hold about you, and be told how we use it;
- have inaccurate data corrected and incomplete data completed;
- have your data erased, often called the right to be forgotten;
- have our use of your data restricted while a dispute about it is sorted out;
- receive the data you gave us in a machine-readable file and have it sent to another provider;
- object to any use we base on legitimate interests;
- withdraw consent at any time, which does not undo what we did lawfully before you withdrew it.
You can also complain to a supervisory authority. In the UK that is the Information Commissioner’s Office. In the EU and the EEA, complain to the authority for the country you live or work in. The European Data Protection Board publishes the full list. We would rather you told us first so we can fix it, but you do not have to.
If you are in California or another US state with a privacy law
California’s CCPA, as amended by the CPRA, and the similar laws now in force in states such as Virginia, Colorado, Connecticut, Texas, Oregon and around fifteen others give you the right to know what we collect and why, to get a copy of it, to have it corrected, to have it deleted, to opt out of the sale or sharing of your personal information, to limit how sensitive personal information is used, and not to be treated worse because you exercised any of these rights. We do not offer financial incentives for your data, so there is nothing to be treated worse about.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. Those two phrases have specific meanings under California law, and both statements are true of the twelve months before the effective date above. We do not collect sensitive personal information, so there is nothing to limit. In California’s categories, the only personal information we collect is identifiers (your name, email address and IP address), internet activity (which page you requested) and the contents of a message you chose to send us. We collect it from you directly and from your browser, and we use it only to reply to you, to publish your comment if you left one, and to keep the site secure.
We honour the Global Privacy Control, a signal your browser can send that means you are opting out of sale and sharing. Right now there is nothing for it to switch off, because we run no advertising or analytics. If we ever add them, a Global Privacy Control signal will be treated as a valid opt-out without you having to do anything else. To use any of the rights above, email [email protected] or use the contact form, and say which state you are in. An authorised agent can make a request for you if they show us written permission.
If you are in Brazil
The LGPD, Lei nº 13.709/2018, gives you the right to confirm that we process your data and to see it, to correct it, to have unnecessary or unlawfully held data anonymised, blocked or deleted, to move your data to another provider, to have data we process on consent deleted, to be told who we have shared your data with, to be told what happens if you refuse consent, and to withdraw consent.
Write to our encarregado at [email protected]. If you are not satisfied, you can complain to the Autoridade Nacional de Proteção de Dados.
Children
Kwyper is written for adults who are buying, running or following cars. It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you are a parent or guardian and you believe a child has sent us something, email [email protected] and we will delete it.
Security
The whole site runs over an encrypted HTTPS connection, so what you type into the contact form is encrypted on its way to us. Access to the WordPress admin area is limited to the people who need it and is protected by unique passwords. We keep the software and plugins updated. No website can promise that nothing will ever go wrong, and we are not going to pretend otherwise. If a breach happens that puts you at risk, we will tell you and the relevant authority within the time the law allows.
Changes to this policy
We review this policy at least once every twelve months, which California law requires, and we update it whenever we add a tool that touches your data. The effective date at the top tells you which version you are reading. If a change matters to you, for example if we start running advertising, we will say so clearly at the top of this page rather than quietly editing a sentence.
Contact
Ranqueei Digital LTDA, CNPJ nº 54.823.192/0001-65
R. Adelino Cardana, 293, Sala 603, Bloco C, Bethaville I / Centro, Barueri/SP, CEP 06401-147, Brazil
[email protected] or the contact form
Related pages: Cookie Policy, Terms of Use, Copyright and DMCA.
Last updated: 16 September 2026. Email: [email protected].