Updated on October 5, 2026.
Who looks after your data
Passaporte Veadeiros, at passaporteveadeiros.com.br, is a guide to Chapada dos Veadeiros made by Vila Infinito. The person responsible for the data is David Vieira, of Vila Infinito. Questions, requests and complaints about your data: davidhsv@gmail.com.
What we receive from Google
When you choose “Continue with Google”, we receive your account identifier, your email address and the basic profile data Google provides, such as name and picture. They are used only to create and protect your passport account. Your email never appears on the site and is not used for advertising. The name Google sends is not published either: your public name is the one you choose in your passport. Signing in does not give access to Gmail, Google Drive or your contacts, and the site never receives your password.
What is public
- Public name. It is optional. With one, you can appear on the leaderboard, which shows anyone, even while your public profile is off, your XP and how many places you stamped: all time, this season, this week and in each town. The name also signs what you publish. Without one, you stay off the leaderboard and your contributions show as “Visitor”.
- Public profile. Also optional, and off by default. When on, a page of its own shows your name, your XP, the places you stamped with the date of each stamp, when you joined, how many of your tips and photos were approved and how many “helpful” marks your tips received. Your stamps also appear, with their dates, in the community reports.
- Tips, published after review, with your public name and how many people found them helpful.
- Road notes, published right away with the condition you marked, after an automatic filter that rejects links, email addresses and phone numbers.
- Photos, published after review with the caption and author name you write, under the CC BY-SA 4.0 license.
- Reviews of guides and services: a rating without text is published right away; with text, after review.
- Suggestions (an official website or Instagram, a missing business) are not published with your name: the curators check them and, if they approve, update the guide.
What stays private
- Your email address and the data received from Google.
- Your “Want to go” list.
- Your answers about each place (road, price, season, effort, pets, kids, guide, today’s status): they count toward the summaries and percentages anonymously, without your name. Only a road note you write is published, as described above.
- The list of your XP events (how much you earned for each action and when), contributions under review or rejected and, while your profile is off, which places you stamped and on what date. Each place shows only how many people stamped it, and the leaderboard shows only the totals described above.
- The request of someone claiming a professional’s listing (contact method and message), which only the curators read.
Review and removal
The guide’s curators (David Vieira, of Vila Infinito) approve or reject tips, photos, reviews with text, suggestions, claims and updates to professionals’ listings, may hide road notes and may remove from public listings a profile that abuses the space. XP for a reviewed item counts only after approval and is taken back if the item is rejected later. If something published here is about you and should come down, write to davidhsv@gmail.com.
Photos you send
Before uploading, your own browser shrinks and converts the photo, which removes data embedded in the file, such as GPS location and camera model. The photo is stored privately until the curators decide. By sending it, you state that you took the photo and agree to publish it under the Creative Commons Attribution-ShareAlike 4.0 license (CC BY-SA 4.0), with the credit you give.
Deleting your contributions or your account
In My passport, “Delete my contributions” removes in one go your stamps, answers, road notes, tips, photos, reviews, suggestions, claims, your “Want to go” list, your XP and your profile. It cannot be undone. If the curators hid your profile or rejected one of your reviews, that record stays until the account itself is deleted: the hidden profile keeps no name and no public page, and the mark of the rejected review, which keeps none of its text, sends your next reviews of that guide or service to the curators first. Photos leave the guide right away; files already published are deleted by the curators, and you can write if you notice one still online.
To delete the account itself or ask for a copy of your data, write to davidhsv@gmail.com from the email address you sign in with. We may confirm your identity before acting on the request. The “Sign out” button ends the session in this browser; revoking access in your Google settings stops the sign-in but does not delete what is already saved here.
Who processes the data
Supabase stores the account, the community database and the photos; the database was set up in the São Paulo region. Vercel hosts the site. Google handles sign-in and provides the map’s satellite imagery. Maps, weather forecasts and images may load from other providers, which receive the requests needed to display them. These services’ infrastructure may process technical data in other countries, and every visit creates technical logs (IP address, browser, time) used for operation and security. No data is sold or used for advertising.
What stays in your browser
Your browser keeps, in local storage and a language cookie, your sign-in session, your language and map preferences, recent searches, a temporary satellite-imagery session and your “Want to go” list, which also works without an account and, once you sign in, is copied to your account. If you try to stamp, answer, mark a tip as helpful, save to “Want to go”, review a service or write a tip before signing in, the action and the draft, with any text you already wrote, are kept in this tab for up to 15 minutes so you can finish after signing in. The site uses no advertising cookies or trackers. Clearing your browser data removes this local information, but not what is saved in your account.
GPX files opened on the map are read in your browser and are not sent to any server.
Your rights under the LGPD
Under Brazil’s General Data Protection Law (Lei nº 13.709/2018), you can ask us to confirm that we process your data, to access, correct, anonymize, block or delete it, to port it, to tell you whom it is shared with, and to withdraw your consent. Signing in and publishing rely on your consent and on running the service you asked for; technical logs rely on the legitimate interest of keeping the site secure. Requests go to davidhsv@gmail.com and are answered within the deadlines set by the law. You may also file a complaint with Brazil’s National Data Protection Authority (ANPD).
Data is kept while the account exists or until you delete it. Backups and technical logs may last for the providers’ retention periods.
Links and bookings
Bookings for the Vila Infinito chalets are made on Airbnb. When you open Airbnb, Instagram, WhatsApp, Wikiloc or other sites, those services’ privacy rules apply.