Privacy Policy
This Policy describes how E-Facials handles personal data, in line with Brazil’s General Data Protection Law (LGPD, Law No. 13.709/2018).
1. Who is in charge
The controller is Marco Ponciano. Privacy, support and rights requests go to contato@marcoponciano.com.br. The service is at https://efacials.marcoponciano.com.br.
2. What E-Facials is
E-Facials is a microexpression training platform. You watch laboratory video clips, choose the matching emotion and follow history, scores and rankings. Videos stream from our CDN (cdnefacials.marcoponciano.com.br) through a short-lived signed address. You do not upload a photo or video of your own face.
3. Data we process
- Account: name, email and a hashed password (never stored in plain text).
- Plan: Free, Trial or VIP, access group and expiry date.
- Use: training and test history, answers, scores, video error reports and staff replies.
- Account metadata: sign-up date, last visit and, after a purchase, Hotmart confirmation data (no card number).
- First-party cookies: session (
efacials_sid), language (efacials_lang: pt-BR, en-US or es-ES) and light/dark theme (efacials_theme).
4. Why we use it
- Create and authenticate the account, including password reset by email (link valid for 1 hour).
- Unlock training categories according to the plan (Free, Trial or VIP).
- Store results, ranking (VIP trainees’ names on the general ranking) and reports.
- Process VIP purchases via Hotmart and notify the team of new sign-ups or purchases.
- Security: math captcha, login attempt limits and video protection.
- Support and legal duties.
5. Who we share with
We do not sell registration lists. Operators required to run the service:
- Locaweb (hosting in Brazil) for the site, database and video files.
- Hotmart, when you buy VIP: payment happens at Hotmart; we receive the purchase status to grant or remove the plan.
- Email delivery (SMTP set in the admin panel), with reply-to contato@marcoponciano.com.br.
6. Ranking and visibility
The general ranking shows name and score of VIP trainees for the last 12 months. Free accounts do not score and do not appear there. The daily test has its own ranking. Your name and email appear inside your own menu; email is not the public ranking label.
7. Your LGPD rights
You may confirm processing, access and correct data (name and password in the profile; email only through support), ask about sharing and, where applicable, request portability or objection. Write to contato@marcoponciano.com.br.
Account deletion: only a Free account can request deletion in the profile. Active Trial or VIP must wait until the plan expires (it falls back to Free on its own). Confirmation requires typing exactly SIM (uppercase) and solving the captcha. Deletion is permanent: registration, training history and reports are removed. Service administration accounts cannot be deleted through that form.
8. Retention
Data is kept while the account exists, to provide training, ranking and support. After deletion, the record is no longer in the student database. Server logs and hosting backups follow the provider’s cycle, for as long as needed for security and continuity.
9. Security
We use password hashing, our own session cookie, HTTPS, short-lived CDN URLs (the video file name does not need to appear on the network) and a restricted admin area. No system is risk-free; if you learn of an incident affecting your data, contact us.
10. Children
E-Facials is a study tool. It is not directed at children under 13. If a guardian finds an irregular account, request deletion at the contact email.
11. Changes
This policy may be updated to match the service. The date at the top is the current version. Continued use after publication means you are aware of the new wording.
12. Governing law and venue
The laws of the Federative Republic of Brazil apply. The courts of the controller’s venue are elected, with express waiver of any other, however privileged. Contact: contato@marcoponciano.com.br.