Cookies and local storage
Necessary storage operates the service. Optional categories remain disabled until you enable them.
| Name | Purpose | Duration | Category |
|---|---|---|---|
| bernado-myrtil-portfolio-session / XSRF-TOKEN | Protects forms, sign-in, cart, private access, and the current session. | Session or configured lifetime | Necessary |
| portfolio_locale | Remembers your selected language. | Up to 1 year | Necessary |
| portfolio_consent | Remembers your privacy choices. | Up to 6 months | Necessary |
| portfolio_visitor | Creates the pseudonymous visitor hash used for first-party analytics. | Up to 2 years | Analytics |
| affiliate_ref | Attributes an eligible store referral to an approved affiliate. | Store-configured referral period | Referral attribution |
Who operates this service
Bernado Myrtil operates the portfolio, journal, project inquiry portal, store, and protected client prototypes available through the bernadomyrtil.com domains. This notice applies across those connected services.
Information you provide
Project inquiries may include your name, email, phone, company, location, project details, budget, timeline, decision role, referral source, and message.
When you sign in with Google, the site receives the verified Google identifier and profile information needed to create or link your account, such as your name, email, and profile image. The site never receives your Google password.
Comments include your account identity and submitted text. Store orders may include your name, email, country, products, prices, coupon, payment method and status, payment reference, download activity, personalization details, and any payment receipt you upload. Affiliate applications include the promotion details you submit.
Information collected through use
With analytics consent, first-party measurement stores the page, route, language, referrer host, device category, time, and a pseudonymous visitor hash. Article engagement may also record reading progress. It does not store the full referrer URL or raw IP address in the page-view record.
Security systems may process IP address, user agent, attempted identifier, approximate country or city supplied by a trusted hosting provider, request details, and account activity to prevent abuse and investigate incidents.
When a protected client prototype is opened, an owner notification may contain the access time, IP address, approximate location supplied by the hosting provider, device and browser details, preferred language, referrer, and user agent. Prototype sessions expire and the packages are not publicly indexed.
Why information is used
Information is used to answer inquiries, operate accounts and comments, process and verify orders and payments, deliver downloads and personalized files, administer affiliates, provide protected prototypes, send operational messages, measure the audience when permitted, secure the service, prevent fraud, keep business records, and comply with legal obligations.
Depending on the context and applicable law, processing is based on your consent, steps requested before a contract, performance of a contract, legitimate interests in operating and protecting the service, or legal obligations.
Service providers and disclosures
Information may be processed by hosting and private object-storage providers, email delivery providers, Google for sign-in, Analytics and AdSense, and the payment method you select, which may include Stripe, Google Pay through Stripe, PayPal, MonCash, or an approved off-platform method.
Pending comment text, the article title, and parent-comment context may be sent to the configured OpenAI or Google Gemini API for automated moderation. The moderation request excludes your email address and IP address. Uncertain or failed results remain available for human review.
Information may also be disclosed to professional advisers, fraud-prevention partners, or public authorities when reasonably necessary to protect rights, investigate abuse, enforce agreements, or comply with law. Personal information is not sold by this service.
International processing
Providers and visitors may be located in different countries. Information may therefore be processed outside your country, where privacy rules may differ. Appropriate contractual, security, and provider safeguards are used where required.
Retention
Session data follows the configured session lifetime. The language cookie lasts up to one year, the consent cookie up to six months, and the pseudonymous first-party visitor cookie up to two years. An affiliate referral cookie uses the referral period displayed by the store.
First-party analytics remains until it is cleared or archived under operational controls. Inquiries, accounts, comments, prototype-access notifications, security records, orders, payment evidence, affiliate records, and support correspondence are kept only as long as needed for the service, contractual, accounting, fraud-prevention, dispute, backup, and legal purposes. Provider-controlled data follows each provider’s settings and policy. A valid deletion request is honored unless information must be retained for a legal or overriding operational reason.
Your choices and rights
You can reject or change optional cookies at any time. You can update the name on your account and remove your own comments from public view through available account controls. You may also request access, correction, a copy, restriction, objection, or deletion of personal information, subject to applicable law and identity verification.
Withdrawing consent stops future optional collection but does not invalidate earlier processing. Payment providers and Google provide separate privacy controls for information they process independently.
Security, children, and changes
The service uses access controls, encrypted transport, private storage, limited permissions, validation, monitoring, and other reasonable safeguards. No online system can guarantee absolute security.
The services are intended for people able to enter the relevant transaction or use the service lawfully and are not directed to children. A parent or guardian may contact the operator if a child submitted personal information.
This notice may be updated when the service, providers, or legal requirements change. The date above identifies the current version.