Privacy Policy

This Privacy Policy explains how REDHEAD STUDIOS LTDA, a legal entity registered in Brazil under CNPJ 48.257.504/0001-18 (“Redhead Studios”, “we”, “our”), handles personal data when you use The One Generator and its companion sites. We act as the data controller under Brazil's General Data Protection Law (Law No. 13,709/2018, “LGPD”).

1. Scope

This Policy applies to theonegenerator.com, cpfgenerator.net, cnigenerator.com, singenerator.com and ssngenerator.com (together, the “Service”).

2. What we do not collect

The Service has no sign-up, login, payments or forms that send data to us. The tools run in your browser: what you type or generate is not sent to our servers or stored by us. The exception is the QR Code Generator (theonegenerator.com): to draw the code, your browser sends the content you typed to the external service api.qrserver.com (goqr.me, QR Code Generator, Germany), along with your IP address and standard request data. Do not enter information in that generator that you do not want to share with that service.

3. Data kept in your browser

To remember your choices, the Service uses your browser's local storage and session storage, on your device only:

• values and options you entered in each tool;
• the history of generated results;
• the tools pinned to your dashboard and their order (theonegenerator.com);
• scoreboard and game state, and preferences such as the timer sound and the light or dark theme;
• whether you dismissed a promotional notice during your visit (erased when the tab is closed).

This data stays on your device and we cannot access it. You can delete it at any time by clearing the site data in your browser settings.

4. Google Analytics

Every site of the Service uses Google Analytics, by Google LLC, to measure usage: pages visited, tools used (only the tool name, never what you typed), where the visit came from, device and browser type, and approximate location derived from the IP address. Google Analytics uses cookies and similar identifiers. We use this data in aggregate to understand what works and improve the Service. You can block measurement with the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout) or with your browser's cookie settings.

5. Google AdSense

The companion sites (cpfgenerator.net, cnigenerator.com, singenerator.com and ssngenerator.com) show ads from Google AdSense. Google and its partners use cookies and identifiers to serve ads, which may be personalised based on your visits to this and other sites, to cap frequency and to measure results. You can turn off personalised ads at adssettings.google.com and learn more at policies.google.com/technologies/partner-sites. When you follow an ad link, the advertiser's policy applies.

6. Hosting

The Service is hosted by Vercel Inc. Like any web server, Vercel logs technical data for each request — IP address, date and time, requested page, browser — to deliver pages, keep them secure and diagnose failures.

7. International transfer

Google and Vercel process data in the United States and other countries, and api.qrserver.com, used by the QR Code Generator, in Germany. These transfers rely on those providers' contractual safeguards, as permitted by Article 33 of the LGPD.

8. Legal bases

We process data on the basis of our legitimate interest (Article 7, IX, of the LGPD) in running, protecting, measuring and keeping the Service free through advertising, always respecting your rights and expectations. You can refuse or delete cookies in your browser settings, block Google Analytics measurement (section 4) and turn off personalised ads at adssettings.google.com (section 5).

9. Retention

Google Analytics and Google AdSense data, Vercel logs and requests to api.qrserver.com are kept for the periods set in those services and their policies. Data kept in your browser stays there until you delete it.

10. Your rights

Under the LGPD you may request: confirmation that we process your data, access, correction, anonymisation, blocking or deletion, portability, information about sharing, withdrawal of consent, and objection to processing. You may also complain to Brazil's National Data Protection Authority (ANPD). Because we keep no accounts, we may need information that lets us locate the data in your request within our providers' services. To exercise your rights, write to contact@redheadstudios.io.

11. Sale of data

We do not sell personal data.

12. Children

The Service is not directed to children under 13 and we do not knowingly collect their data. If you are responsible for a child and believe they gave us data, contact us.

13. Changes to this Policy

We may change this Policy at any time. The effective date at the top of this page shows the current version. We do not send e-mail notices and do not ask you to accept it again: by continuing to use the Service after the effective date, you accept the version in force.

14. Language

This Policy may be made available in several languages. Translations are provided for convenience. If they differ, the Portuguese (pt) version prevails.

15. Contact

Data protection officer and privacy questions: contact@redheadstudios.io.