Privacy Policy

Our principle is simple: process the minimum of personal data possible. The public browses without signing up for anything, and collaborators sign in with LinkedIn — their identity stays with LinkedIn, not with us.

Last updated: October 10, 2026.

1. Who we are

Iteanos for Education is an initiative run by openpbl.ai, the party responsible (controller) for the data processing described here. The site is iteanospelaeducacao.net.

2. Site visitors: we collect no personal data

To browse and read projects, initiatives, channels and frequently asked questions, you do not need to sign up or log in. We use no tracking cookies and no analytics or advertising tools.

Your theme (light/dark) and language preferences are stored only in your own browser (local storage) and are not sent to us or to third parties.

3. Editors: social sign-in with LinkedIn

Only invited collaborators (“editors”) log in, using “Sign in with LinkedIn” (the OpenID Connect protocol). In that case:

LinkedIn verifies your identity and tells us that your email is valid. LinkedIn is the controller of your profile data — see the LinkedIn Privacy Policy.
In our database we store only: an irreversible code (hash) of your email, an optional label the administrator types (e.g. “coordination”), and your role (editor/administrator). We do not store your name, photo or your email in readable form.
Your name may appear on screen only during the session (while you are logged in) and is not saved to our database.

Why a hash? Storing the email as an irreversible code lets us recognize that you were invited without keeping a list of emails in plain text. It is how we keep an access list while minimizing personal data.

4. Administration

Administrator access uses a password, independently of social sign-in. It is used to manage content and the list of invited editors.

5. Cookies we use

isess — an authentication cookie (only for logged-in users). It is HttpOnly, signed, and expires in 24 hours. It does not identify visitors.
listate and linonce — temporary cookies (10 minutes), used only during LinkedIn sign-in to protect against fraud (CSRF).

We use no marketing, profiling or cross-site tracking cookies.

6. Who we share with

LinkedIn — identity provider for social sign-in.
Cloudflare — hosting of the site and the database (processor). Connections are protected by HTTPS.

We do not sell or rent personal data, and we do not share it for advertising.

7. How long we keep it

We keep an editor's record on the access list while they remain a collaborator. When the administrator removes them from the list, the corresponding record is deleted.

8. Your rights (LGPD)

You may request, at any time, access to, correction of, or deletion of your data, as well as information about the processing. Editors can request removal from the access list (and of the corresponding record) from the administrator or via the contact below.

9. Contact

Questions or privacy requests: privacidade@openpbl.ai.

This policy may be updated to reflect site improvements or legal requirements. The date at the top indicates the version in force.