Privacy Policy

Introduction

Welcome to Braviero ("we," "us," or "our"). We value your privacy and are committed to being transparent about how we handle your information. This Privacy Policy explains how we collect, use, and protect your information when you visit or interact with our website braviero.com (the "Site").

By accessing or using our Site, you agree to the terms of this Privacy Policy and our Terms of Use. If you do not agree, please do not use our Site.

1. Data Controller

The data controller responsible for your personal data is Braviero. For any questions or requests regarding your data, please contact us at [email protected].

2. Information We Collect

Braviero uses Google Analytics 4 (GA4) and Google Ads with Google's Consent Mode v2 to understand how visitors interact with our Site and to measure our advertising. Data collection works in two tiers:

2.1 Cookieless, Anonymized Data (Collected Automatically)

Regardless of your consent choice, GA4 sends basic, cookieless pings to Google. These pings contain no cookies, no persistent identifiers, and IP addresses are anonymized by Google before storage. This data is used by Google for aggregated traffic modeling and cannot be linked to individual users. It may include:

• Page views (without user-level attribution)
• Approximate geographic location (country/region level, derived from anonymized IP)
• Browser type and device category

2.2 Cookie-Based Analytics (Requires Consent)

When you accept analytics cookies, GA4 switches to full measurement mode. This places first-party analytics cookies on your device for session and user-level attribution. This may include:

• Pages visited and time spent on each page
• Referring website or search terms that led you to our Site
• Browser type, device type, and screen resolution
• Approximate geographic location (country/region level)
• Interactions such as clicks and scrolling behavior
• Session duration and return visits

We do not collect personal data such as your name, email address, or any other directly identifying information through these analytics tools.

3. Legal Basis for Processing (GDPR Art. 6)

We process data under the following legal bases:

• Consent (Art. 6(1)(a)): For visitors in the EU/EEA, cookie-based analytics and all advertising cookies (Google Ads conversion measurement, remarketing, and ad personalization) are only set after you explicitly grant consent via our cookie banner, and only for the purposes you consent to.
• Legitimate interest (Art. 6(1)(f)): Cookieless, anonymized traffic modeling through Google's Consent Mode v2 is processed under our legitimate interest in understanding basic site traffic patterns. This data contains no personal identifiers, no cookies, and cannot be linked to individual users.

For visitors outside the EU/EEA, analytics data is collected under our legitimate interest in understanding site usage, with an acknowledgment banner informing you of this practice.

4. Cookies and Automated Data

Cookies are small text files stored on your device. We use the following types:

• Analytics Cookies (Google Analytics _ga, _ga_*): First-party cookies for session and user attribution. Duration: up to 2 years. Only set after you accept via the cookie banner.
• Advertising Cookies (Google Ads): Used to measure ad campaign conversions and to support remarketing and ad personalization. Set by Google only after you accept via the cookie banner (or, outside the EU/EEA, unless you decline).
• Consent Preference: We store your acceptance in your browser's local storage (persistent across sessions). If you decline, this is stored in session storage and clears when you close your browser, so you will see the banner again on your next visit.

Consent Banner

Visitors detected as being in the EU/EEA (based on your browser's timezone) are shown a consent banner with Accept and Decline options. Visitors outside the EU/EEA are shown an acknowledgment banner. If our detection is inaccurate, please contact us and we will ensure your preferences are respected.

Withdrawing Consent

You can withdraw your consent at any time by clearing your browser's cookies and local storage for this Site, or by contacting us at [email protected]. On your next visit, the cookie banner will appear again, allowing you to make a new choice. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. How We Use Information

We use collected analytics and advertising data to:

• Understand how visitors interact with our Site
• Identify popular content and areas for improvement
• Analyze traffic and performance to enhance user experience
• Measure the effectiveness of our advertising campaigns (e.g. Google Ads conversion tracking) and show relevant ads
• Comply with legal obligations

We do not sell or rent your personal data. Where you consent to advertising cookies, data is shared with Google to measure ad campaign performance and to support remarketing and ad personalization. You can decline this at any time via the cookie banner.

6. Data Retention

Analytics data in Google Analytics is retained for 14 months, after which it is automatically deleted. Anonymized, aggregated reports may be retained indefinitely as they cannot be linked to individual users.

Analytics cookies (_ga) expire after 2 years of inactivity. Google Ads cookies (e.g. _gcl_*, used for conversion measurement) typically expire after up to 90 days. Session cookies expire at the end of your browsing session.

7. International Data Transfers

Analytics and advertising data processed by Google may be transferred to and stored on servers located outside the EU/EEA, including in the United States. Google LLC participates in the EU-U.S. Data Privacy Framework and applies Standard Contractual Clauses (SCCs) to ensure an adequate level of data protection. For more information, see Google's Privacy Policy.

8. Data Security

We use commercially reasonable measures to protect our Site and any collected data from unauthorized access, alteration, or disclosure. All analytics data is transmitted over HTTPS. IP addresses are anonymized by Google before storage. Please keep in mind that no internet transmission is 100% secure, and we cannot guarantee absolute security.

9. Third-Party Services

Our Site uses the following third-party services:

• Google Analytics 4 (GA4): An analytics service provided by Google LLC. Uses Consent Mode v2 for GDPR-compliant cookieless tracking when consent is not granted, and full cookie-based tracking when consent is granted.
• Google Ads: An advertising service provided by Google LLC. Uses Consent Mode v2 to measure ad campaign conversions and to support remarketing and ad personalization. Advertising cookies are only set after you grant consent (or, outside the EU/EEA, unless you decline).
• Google Tag Manager (GTM): A tag management system that facilitates the deployment of analytics and advertising tags. GTM itself does not collect personal data.
• Google Fonts: A web font service provided by Google LLC to display custom typefaces. When you visit our Site, your browser downloads fonts from Google's servers, which may result in your IP address being transmitted to Google.

For more information on how Google handles your data, please visit Google's Privacy Policy and How Google Uses Information from Sites That Use Its Services.

10. Third-Party Links

Our Site may contain links to third-party websites, including affiliate partners. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any external websites you visit through our Site.

11. Your Rights (GDPR)

If you are located in the EU/EEA, you have the following rights under the General Data Protection Regulation:

• Right of access (Art. 15): Request a copy of the data we hold about you.
• Right to rectification (Art. 16): Request correction of inaccurate data.
• Right to erasure (Art. 17): Request deletion of your data.
• Right to restrict processing (Art. 18): Request that we limit how we use your data.
• Right to data portability (Art. 20): Request your data in a structured, machine-readable format.
• Right to object (Art. 21): Object to processing based on legitimate interest.
• Right to withdraw consent (Art. 7(3)): Withdraw your consent at any time without affecting the lawfulness of prior processing.

Our analytics data is anonymized and not linked to individual users, so we may not be able to identify it for specific visitors. Advertising data (such as Google Ads conversion and remarketing identifiers) is processed by Google as a joint or independent controller; to exercise rights over that data you can also use Google's My Ad Center and Google's account-level privacy controls.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

12. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU/EEA member state of your habitual residence, place of work, or place of the alleged infringement. A list of EU data protection authorities can be found on the European Data Protection Board website.

13. Children's Privacy

Our Site is intended for users aged 16 and older. We do not knowingly collect information from children under 16. If we learn that we have inadvertently collected data from a child, we will delete it immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy occasionally to reflect operational, legal, or regulatory changes. Any updates will be posted on this page with the revised date at the top. If we make material changes, we will reset consent preferences so that you are informed and can make a new choice. Your continued use of the Site after changes are posted will mean that you accept those changes.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your data, please contact us at: