Privacy Policy

1. Who we are

Scanlize (https://scanlize.com) is operated by Marcelo Caiuby, an independent developer based in Brazil, who is the data controller for the processing described in this policy. We are a small-scale operator under ANPD Resolution CD/ANPD no. 2/2022.

You can reach us at any time through the feedback button shown at the bottom-right corner of every page. That is our official channel for privacy questions and data-subject requests.

2. Your files never leave your device

The CSV and Excel files you open in Scanlize are read, analysed and visualised entirely inside your browser using JavaScript and TensorFlow.js. We do not upload, receive, store or see your files or their contents, and we have no server that could. Exports (CSV, JSON, PDF, PPTX) are generated locally too. The same applies to the sample datasets offered on the home page.

3. Personal data we do process, why, and on what legal basis

Although your files stay local, the website itself processes a small amount of data:

• Anonymous usage statistics: on each page load and when a feature is used (for example, when a file or a sample dataset is loaded) we record one event containing the event name, the page or feature, a coarse device class (desktop or mobile), the browser family and a timestamp. It contains no IP address, no cookie and no identifier of any kind, so it cannot be linked to you. Purpose: understand how many people use Scanlize and which features matter. Legal basis: legitimate interest (GDPR Art. 6(1)(f); LGPD Art. 7, IX).
• Feedback form (only if you use it): your name, email address and message. Purpose: read and answer your suggestion. Legal basis: your consent and our legitimate interest in improving the product (GDPR Art. 6(1)(a) and (f); LGPD Art. 7, I and IX). Name and email are required so that we can reply; nothing else is asked.
• Technical delivery: our hosting and API providers (Amazon Web Services) process the IP address and request headers of every visitor to deliver the pages and protect the service against abuse, and keep technical request logs, which include the IP address, for up to 30 days for error diagnosis. We do not use them to identify visitors.
• Advertising and Google tags: see sections 5 and 6.

4. Cookies and local storage

Strictly necessary storage: your browser's local storage remembers your theme choice ("scanlize-theme"). It does not track you and requires no consent. We set no analytics cookies and no identifiers of our own.

Advertising cookies may be set by Google and its partners as described in section 5: in the European Economic Area, the United Kingdom and Switzerland only after your consent; elsewhere as permitted by the law of your country, with the opt-out options listed in section 5.

5. Advertising (Google AdSense)

Scanlize is free and is funded by advertising served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to Scanlize and/or other sites on the Internet.

You may opt out of personalised advertising by visiting Google Ads Settings (https://www.google.com/settings/ads) or www.aboutads.info/choices (in the EU, www.youronlinechoices.eu). The list of ad technology providers Google may use, with links to their privacy policies, is published at https://support.google.com/admanager/answer/9012903. How Google uses information from sites that use its services: https://policies.google.com/technologies/partner-sites.

Where the law requires consent (European Economic Area, United Kingdom, Switzerland), a Google-certified consent dialog (IAB TCF v2.2) is shown before advertising cookies are set, and while such a dialog applies a "Privacy settings" link appears in the footer so you can change or withdraw your choice at any time. Without consent you may see non-personalised or limited ads, or no ads at all.

Google Ads conversion tag: we may use a Google Ads tag (AW-17861712785) to measure whether visitors arriving from our own advertisements use the site. Where consent is required and has not been given, it sets no cookies and sends only cookieless pings (page URL and time) that Google uses for aggregated conversion modelling.

6. Who receives your data and international transfers

Processors acting on our instructions: Amazon Web Services, Inc. (hosting, API and storage in the us-east-1 region, United States). Independent controllers: Google LLC / Google Ireland Ltd (advertising and conversion measurement). Transfers outside Brazil or the European Economic Area rely on the providers' standard contractual clauses and, for AWS and Google, the EU-U.S. Data Privacy Framework, in line with LGPD Art. 33 and GDPR Chapter V. We do not sell personal data.

7. How long we keep data

• Anonymous usage events: 13 months, then deleted automatically. Events recorded before 5 September 2026 also included the visitor's IP address and a random device identifier; those records are deleted automatically 13 months after collection and are not used.
• Feedback form messages: kept until handled; we review and delete them manually at least once a year.
• Technical request logs (hosting/API): up to 30 days.
• Advertising cookies: controlled by Google; see https://policies.google.com/technologies/cookies.

8. Your rights

Under the LGPD (Art. 18) and the GDPR (Arts. 15-22) you may, free of charge: confirm whether we process your data; access it; correct it; have it anonymised, blocked or deleted; receive it in a portable format; know with whom it was shared; be informed of the possibility of refusing consent and of the consequences; refuse or withdraw consent at any time (without affecting prior processing); and object to processing based on legitimate interest. Because current usage statistics are anonymous, the personal data we can locate about you is limited to feedback messages you sent and, for visits before 5 September 2026, the IP-based event records described in section 7. Send requests through the feedback button; we answer within 15 days.

You may also lodge a complaint with the Brazilian National Data Protection Authority (ANPD, https://www.gov.br/anpd) or, in the EU/UK, with your local supervisory authority.

We do not make automated decisions with legal or similarly significant effects about you.

9. Children

Scanlize is not directed to children under 16 and we do not knowingly collect their personal data. If you believe a child has sent us data through the feedback form, contact us and we will delete it (LGPD Art. 14).

10. Changes to this policy

Any change is published here with a new "Last updated" date and version number. Material changes affecting consent-based processing will be announced on the site before they take effect.

11. Contact

Marcelo Caiuby, Brazil — use the feedback button on any page of this site.