Privacy Policy

Operator identification

The controller responsible for processing personal data collected on this site is Suki Desu, registered under Brazilian taxpayer ID (CNPJ) No. 22.973.769/0001-29, with registered office in the Jardim Progresso neighborhood, postal code 75.063-600, Anápolis, state of Goiás, Brazil. The founder and responsible editor is Kevin Henrique.

Suki Desu (skdesu.com) has been online since 2014 and operates as a multilingual portal (15 languages) dedicated to Japanese culture, the Japanese language, anime, manga, otaku culture, and travel to Japan. For inquiries, data-subject requests, and general contact, reach us at contato@skdesu.com or by phone at (62) 9370-6844.

No Data Protection Officer (DPO) has been formally appointed. All matters relating to the processing of personal data should be directed exclusively to contato@skdesu.com, monitored by the responsible editor.

Data we collect

Suki Desu collects only the data necessary to operate the site safely and with quality. The site does not require user registration for reading and does not collect sensitive data as defined by the LGPD (Art. 11). Collected data falls into three categories:

a) Technical logs and browsing data: IP address (full or truncated), browser language, pages accessed, date and time of access, device type, browser, operating system, traffic source (referrer), and anonymous performance indicators such as page-load time. This data is generated automatically by any web server and CDN upon receiving an HTTP request.

b) Form and comment data: name, e-mail address, message or comment content, language used, and technical fingerprint signals required to prevent spam, fraud, and automated abuse (e.g., verification tokens, session checksums). Comments may undergo human review and automatic filtering before publication.

c) Cookie data: identifiers generated by essential, analytical, and advertising cookies — described in full in the cookies section of this policy.

Purposes and legal bases for processing

All processing of personal data carried out by Suki Desu rests on at least one of the legal bases set out in Art. 7 of Brazil's LGPD. The purposes, the data involved, and the respective legal bases are as follows:

— Technical operation and site security (logs, IP address, device, browser) → legal basis: legitimate interest (Art. 7, IX) in ensuring stability, attack prevention, and service integrity. — Performance analysis and editorial improvement (pages accessed, session duration, anonymous indicators) → legal basis: legitimate interest (Art. 7, IX), as the processing is proportionate to what a user reasonably expects when accessing a content site. — Publication of comments and handling of form submissions (name, e-mail address, content) → legal basis: consent (Art. 7, I) provided at the time the form is submitted or the comment is posted. — Display of personalized advertisements via Google AdSense and partners (advertising cookies) → legal basis: consent (Art. 7, I) — data subjects may manage or withdraw this consent at any time. — Compliance with a court order, administrative order, or legal obligation → legal basis: compliance with a legal or regulatory obligation (Art. 7, II).

Suki Desu does not use collected data for automated decision-making that produces legal effects on data subjects, nor to build personal profiles for sale to third parties.

Cookies, advertisements, and Google AdSense

Suki Desu uses cookies — small text files stored on the user's device — for three distinct purposes: (1) essential cookies, required for the basic functioning of the site (e.g., language preference, form security tokens); (2) analytical cookies, which measure audience and browsing behavior in aggregate; (3) advertising cookies, used by Google AdSense and the Google partner network to display advertisements relevant to the user's browsing profile.

Suki Desu is monetized through Google AdSense. Google, as an advertising partner, may use cookies — including the DART cookie — to serve ads based on a user's prior visits to this site and to other sites across the web. Users may disable the DART cookie and customize their ad preferences by visiting Google Ad Settings at google.com/settings/ads. Third-party advertising providers may apply their own privacy policies and measurement technologies.

To manage or block cookies at the browser level, users may access the privacy settings of their browser (Chrome, Firefox, Safari, Edge, etc.) and adjust permissions as needed. Disabling essential cookies may impair certain site features. Disabling advertising cookies does not reduce the number of ads displayed — it only makes those ads less relevant to the user's interests.

Data sharing

Suki Desu does not sell personal data to third parties. Data is shared only in the following circumstances and with the following categories of recipients:

— Infrastructure and hosting providers: servers, CDN, and cloud platforms used to host and distribute site content receive technical access data (IP address, HTTP headers) as a natural part of network operation. — Advertising providers (Google AdSense and Google network partners): receive cookie identifiers and browsing data for ad targeting and measurement, subject to the user's consent. — Analytics services: traffic-analysis tools may receive aggregated or pseudonymized browsing data. — Anti-spam services: tokens and technical signals from forms may be verified by third-party services to prevent automated abuse.

In response to a court order, a determination by a competent administrative authority (including the ANPD — Brazil's National Data Protection Authority, Autoridade Nacional de Proteção de Dados), or an express legal obligation, Suki Desu may share personal data to the extent strictly required. Where legally permitted, affected data subjects will be notified.

International data transfers

Suki Desu is a multilingual site with a global audience. The infrastructure, CDN, advertising (Google AdSense), and analytics providers used by the site may store and process data on servers located outside Brazil, including in the United States and other countries.

These international transfers are conducted under the safeguards provided for in Arts. 33 to 35 of the LGPD — including transfers to countries or international bodies that offer a level of personal data protection equivalent to that required by Brazilian law, or through specific contractual clauses agreed with the relevant suppliers. Google operates under internationally recognized compliance frameworks and publishes its data processing terms at privacy.google.com/businesses/processorterms/.

Data-subject rights

As a data subject, you hold the following rights under Art. 18 of Brazil's LGPD, exercisable at any time:

— Confirmation of processing: to find out whether Suki Desu processes your personal data. — Access: to obtain a copy of the personal data we hold about you. — Correction: to request the updating or rectification of incomplete, inaccurate, or outdated data. — Anonymization, blocking, or erasure: to request that data which is unnecessary, excessive, or processed in breach of the LGPD be anonymized, blocked, or deleted. — Portability: to receive your data in a structured, interoperable format, where technically feasible. — Erasure of consent-based data: to request deletion of data whose processing was based on your consent, except where retention is required by law. — Information about sharing: to find out which public and private entities your data is shared with. — Information about the right to withhold consent: to be informed of the consequences of declining to consent. — Withdrawal of consent: to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Exercising these rights is free of charge. Requests may be submitted through the channel described in the following section. Responses will be provided within 15 (fifteen) calendar days, a period that may be extended where there is significant technical complexity or a high volume of simultaneous requests.

How to exercise your rights

To exercise any of the rights listed above, send a request by e-mail to contato@skdesu.com with the subject line 'LGPD — Data Subject Rights'. You may also call (62) 9370-6844 during business hours (Anápolis/GO, GMT-3).

To protect your privacy and prevent third parties from improperly accessing your data, we may ask you to verify your identity before fulfilling the request. Verification may be carried out using the e-mail address provided at registration, a comment reference number, or any other information that reasonably confirms ownership of the data.

If you believe your rights have not been adequately addressed, you may file a complaint with Brazil's National Data Protection Authority (ANPD — Autoridade Nacional de Proteção de Dados), as provided for in Art. 18, § 1, of the LGPD, through the channel at gov.br/anpd/.

Retention and information security

Personal data collected by Suki Desu is retained only for as long as strictly necessary to fulfill the purposes for which it was collected, or for the period required by a legal, regulatory, or contractual obligation. Technical server logs are retained for the minimum period necessary for security and operational diagnostics. Form data and published comments are kept for as long as the related content remains available on the site. Once the retention period expires, data is securely disposed of or irreversibly anonymized.

Suki Desu applies reasonable technical and administrative measures to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction — including secure communication protocols (HTTPS/TLS), database access controls, code versioning, and infrastructure monitoring.

No system for transmitting or storing data over the internet is completely immune to breach. Should a security incident occur that poses a material risk to data subjects, Suki Desu will notify the ANPD and, where applicable, the affected data subjects, as required by Art. 48 of the LGPD.

Children's content and protection of minors

Suki Desu is not a site directed primarily at children (under 12 years of age) or adolescents (aged 12 to 18), although its subject matter — Japanese culture, anime, and manga — naturally attracts younger readers. The site does not intentionally collect personal data from children or adolescents without the express consent of their parents or legal guardians, as required by Art. 14 of the LGPD.

If you are a parent or legal guardian and believe that a child or adolescent in your care has provided personal data to Suki Desu without your consent, contact us at contato@skdesu.com with the subject line 'LGPD — Minor'. The data will be reviewed and deleted promptly upon verification of the request.

Amendments to this policy and applicable law

This Privacy Policy may be updated periodically to reflect changes in legislation, data processing practices, or the services offered by Suki Desu. The 'last updated' date at the top of this page indicates when the current version came into effect. Material amendments — those that significantly affect data-subject rights or the purposes of processing — will be communicated prominently on this page.

Continued use of the site after a revised version of this policy has been published constitutes acceptance of the new terms, to the extent permitted by the LGPD. Where an amendment requires fresh consent, that consent will be sought directly from the data subject.

This policy is governed by Brazilian law, in particular Law 13.709/2018 (Brazil's General Data Protection Law — LGPD), the Brazilian Internet Civil Framework (Marco Civil da Internet — Law 12.965/2014), and the Brazilian Consumer Protection Code (Código de Defesa do Consumidor — CDC, Law 8.078/1990). The parties elect the District (Comarca) of Anápolis, state of Goiás, Brazil, as the exclusive venue for resolving any disputes arising from this policy, without prejudice to the right of a consumer to bring proceedings before the court of their domicile.