This is a reference translation. The Portuguese version is the one that applies. Read in Portuguese

Radar do Voto Privacy Policy

Version 1.5 · In force since October 18, 2026 · Previous versions: 1.4, 1.3, 1.2, 1.1 and 1.0

What changed in version 1.5 (October 18, 2026). In the Lula x Flávio Bolsonaro panel, markings are now by map area, no longer by school (section 5.6).

1. On one page

• Radar do Voto exists to bring transparency to elections and to be a memory of the vote in Brazil, helping voters decide their next vote. Browsing is open to everyone; and, consistent with that, we collect as little personal data as possible: only what each purpose requires.
• To browse the site, you do not need to identify yourself. There is no mandatory registration, except to see the 2026 results by city, which may require login and payment because of high traffic (section 5). The site uses measurement and advertising cookies (section 4.2). You can object to them at any time, through your browser settings or by contacting us (section 4.2), without losing any free part of the site.
• When you register (to follow the elections, access the Presidential Panel or see the 2026 results by city when they require login), we ask for your name, email and mobile phone.
• When you purchase a paid product (the Mapa do Voto Panels, the Radar plans or the PDF Reports), we keep the data of your purchase (section 5.5). Payment is processed by Mercado Pago; no card or Pix data passes through Radar do Voto, not even when the plan renews by itself on the credit card.
• The site publishes public election data from Brazil's Superior Electoral Court (TSE) (section 10).
• You have rights over your data, and section 9 explains how to exercise them.

2. Who processes your data (controller) and how to reach us

Controller: RADAR DO VOTO ASSESSORIA E CONSULTORIA POLÍTICA E ELEITORAL LTDA, registered under CNPJ 68.178.265/0001-18.

Person in charge of processing personal data (DPO), art. 41 of the LGPD (Brazil's General Data Protection Law): the role is performed by the owner of the controller, who can be reached at [email protected].

Channels:

• Email: [email protected]
• WhatsApp: +55 11 91111-2892

For privacy requests, use email.

3. The principle behind everything: we only collect what we use

We do not collect data "just in case". Each field in this policy exists because it has a stated purpose. If the purpose ends, the field goes.

4. Data of site visitors

4.1 What the site collects today (and it is little)

IP address. It arrives with every request, as on any site. We use it for:

• Security and request limiting, to prevent a robot from taking the site down. The counter stays in the server's memory, within a window of a few minutes, and is discarded afterwards, that is, it does not go into any database.
• The application access log on the server (log file), which also stores the date, time, page requested and browser identification.

Legal basis: legitimate interest in keeping the service running and secure (art. 7, IX) and, as to the access log, compliance with a legal obligation (art. 7, II): Brazil's Internet Civil Framework (Law 12,965/2014, art. 15) requires application providers to keep access logs for six months.

Retention: application access logs are kept for six months and discarded after that period, unless the law requires them to be kept longer.

Preferences saved in your browser. Light or dark theme and which page sections stay collapsed. They are kept in your browser's local storage (localStorage), are never sent to us and disappear if you clear the site data. Technically they are not cookies, but we mention them because the practical effect (something stored on your device) is the same.

How you use the site. We collect basic data about how you interact with the site to improve our services. This measurement is not shared with third parties (such as advertising platforms).

4.2 Cookies, measurement and advertising

The site uses cookies for three purposes:

• Strictly necessary (security). Set by the content delivery network to tell people from robots (without them there is no protection against attacks). They are not used for advertising, do not build a profile and do not depend on consent.
• Audience measurement. To understand how the site is used and improve it.
• Advertising. Tools from advertising platforms, to measure the use of the site and show our ads to those who have already visited it (remarketing).

How to refuse. You can block measurement and advertising cookies through your browser settings, without anything on the free site ceasing to work, and you can object to this processing by contacting us (section 2). Blocking in the browser does not stop everything that goes to the advertising platforms (section 6). We display an informational notice about cookies while you browse.

Campaign pages. On our campaign landing pages the notice may not appear right at the entrance; in these cases, measurement and advertising cookies work on the basis of legitimate interest (below). You can still refuse them at any time, through your browser settings or through our contact (section 2).

Legal basis: legitimate interest (art. 7, IX, of the LGPD) in measuring the use of the site and promoting the service to those who have already visited it; security cookies also rely on legitimate interest (art. 7, IX). Part of the browsing data is shared with advertising platforms, which process it as controllers (section 6).

5. Registration and communication

Registration lets you follow the elections, access the Presidential Panel (free) and purchase and access the paid products (the Mapa do Voto Panels, the Radar plans and the PDF Reports). No results lookup requires registration, except for the 2026 results by city, which may require login and payment because of high traffic. Payment, when there is one, is made through Mercado Pago (section 6).

5.1 What we ask for and why

5.2 The communications you receive

When you create the account, you start receiving two types of message:

1. Service messages: the login access link, the purchase confirmation, the report delivery, the notice before each automatic renewal charge and notices about your account. They are essential to use what you asked for. Some of them (the Pix code and the purchase confirmation) may also go by WhatsApp, to the registered mobile phone.
2. Radar do Voto news and tips, on the basis of legitimate interest in keeping you informed about the service you already use (art. 7, IX). You can decline them at any time (section 5.3), without affecting your login or your account.

Nothing on the free site depends on receiving the news. We keep the exact text of the registration acceptance, with date, time and IP.

5.3 Leaving the list

You stop receiving the news with one click on the unsubscribe link in the footer of any news email, without logging in and without having to explain.

5.4 Deleting the account

You ask, and we really delete the registration data (it is not deactivation). We keep only the minimum record that an unsubscription happened (the email in an irreversible format), for as long as necessary so that we do not send you messages again by mistake, and whatever the law requires us to keep.

5.5 Data of your purchase

When you purchase a paid product (a Mapa do Voto Panel, a Radar plan or a PDF Report), we process the data needed to carry out the purchase and maintain your access or deliver your report: the product purchased (which one and for which state; for a Report, the chosen candidacy or place), the amount, the date, the payment status the platform reports to us, the delivery record and the invoice data (CPF or CNPJ, name or company name, email for delivery and, as applicable, address and mobile phone), which we request after the payment is approved. To make it easier, we fill in this form with the name and CPF or CNPJ of the payer, which Mercado Pago reports to us, with the address entered in the card payment or with the data from your previous purchase, and you check it and may change it. We keep this data for as long as the access lasts and for the periods required by tax and commercial law, even after the access has ended.

Payment data (card number, Pix key, password, financial data) is processed exclusively by the payment platform, Mercado Pago: Radar do Voto does not collect, see or store this data (section 6). On the plan with automatic renewal, Mercado Pago stores the card for the following charges; we store only the subscription code, your acceptance and the result of each charge. When you cancel, the charges stop, and these records are kept for the period required by tax and commercial law.

Legal basis: performance of the contract (art. 7, V) and compliance with a legal obligation, including tax (art. 7, II).

5.6 Lula x Flávio Bolsonaro panel: the side you choose

The side you choose in the panel is stored only in your browser, never in your account. Each marking (action, time in a map area, material drop-off or support point, notice, confirmation or report) is recorded without your name, without your account and without your device, only with the side and a code that only your browser can recreate. For others, what you mark appears as a number of people per map area and day, added to everyone else's, and the points, the notices and the gatherings you choose to show on the map (walk, march, motorcade, rally and others, with the type, the day, the time and the reference map area) appear without an author. To limit daily use, we count markings by a daily code that does not include the side. You can switch sides and delete your markings in the panel itself. If you clear your browser data, the list of your markings is lost and they can no longer be deleted through the panel; they leave the map on their own.

6. Who else handles the data

We use infrastructure providers, who act as processors and only do what we ask:

About Mercado Pago (payment): when you purchase a paid product, your payment data is provided directly to Mercado Pago (Mercado Livre), which processes it to handle the charge, prevent fraud and comply with its own legal obligations. In this processing, Mercado Pago acts as controller of the payment data, under its own privacy policy, and reports to us only the confirmation and the minimum transaction data, including the name and CPF or CNPJ of the payer, which we use to fill in the invoice data. On the plan with automatic renewal, Mercado Pago stores the card and makes the following charges. Radar do Voto does not receive your card or Pix data.

About Google (log in with a Google account): if you choose this way of logging in, Google confirms who you are and sends us your account identifier, your email and your name. Google acts as controller of your account data, under its own privacy policy. We do not receive your Google password or other account data.

About advertising: the tools of the advertising platforms used on the site (section 4.2) receive your browsing data for measurement and remarketing. In this processing, these platforms act as controllers, each under its own privacy policy. To measure the results of ads, Meta also receives, in scrambled form (a conversion that does not allow the original data to be read, but allows Meta to recognize those who also have an account with it), the email, mobile phone, name, state and an account code of those who register or buy and, on purchase, the CPF or CNPJ of the payer. Along with it, unscrambled, go the IP address, the browser identification and the codes that Meta's own cookies store on your device. On purchase, it also receives the product and the amount. Blocking these cookies in your browser settings prevents them from being stored on your device, but does not stop all sharing: the tools keep loading on the pages, and part of the data goes to the platforms through our server, without passing through the browser. You can also object to this processing through our contact (section 2).

We may also share data when there is an order from a competent authority or a need for defense in legal proceedings. If this happens and the law allows us to notify you, we will.

7. International transfer

Part of the infrastructure belongs to foreign companies, and the data may be processed outside Brazil, especially in the content delivery network, in WhatsApp and in the advertising platforms. When this occurs, the transfer relies on the safeguards the LGPD allows (art. 33), with standard contractual clauses along the lines approved by the ANPD (Brazil's National Data Protection Authority) and the international transfer addenda that infrastructure providers incorporate into their contracts.

Deliberately, the server and the databases are in Brazil (São Paulo region), and the intention is for email delivery to stay there as well. Logging in with a Google account, when you choose it, involves Google outside Brazil.

8. Security

What exists today:

• All traffic is encrypted (HTTPS).
• The server only accepts connections coming from the protection network; the application ports cannot be reached directly from the internet.
• The databases are opened read-only by the application.
• Automatic request limits by origin, against scraping and overload.
• The origin certificate is valid, with strict validation mode between the protection network and the server.

No system is impregnable. If there is a security incident with relevant risk, we will notify the ANPD and the affected data subjects, as required by art. 48 of the LGPD.

9. Your rights and how to exercise them

You can object to the measurement and advertising processing done on the basis of legitimate interest, through your browser settings or by asking through our contact (section 2). You also have the rights under the LGPD.

How to ask: by email, [email protected]. Describe the request and whatever is needed to locate the data.

10. Election data published on the site

The site publishes election result data (name, party, number, office, votes, candidacy status and, for the most recent elections, the campaign photograph registered with the TSE), extracted from the open data of the Superior Electoral Court.

This is public information from electoral records: candidacy registration is a public act by law (Law 9,504/1997), and the TSE publishes it under its duty of transparency. The processing relies on the publicly accessible nature of the data (LGPD, art. 7, §§ 3 and 4) and on the legitimate interest (art. 7, IX) in bringing transparency to the electoral history of those who ask for votes (data made manifestly public by the very nature of the registration).

The site also publishes campaign finance data, extracted from the campaign finance reports released by the TSE (DivulgaCandContas system): how much each candidate raised, from whom and how they spent it, including the names of donors (individuals and legal entities) and the amounts donated. Financial reporting is a public act required by law (Law 9,504/1997), released by the TSE under its duty of transparency. The processing of this data relies on the same bases as the previous paragraph: the publicly accessible nature of the data (LGPD, art. 7, §§ 3 and 4) and the legitimate interest (art. 7, IX) in bringing transparency to who finances election campaigns. The same correction and removal rule described below applies to this data.

The same public candidacy data makes up the PDF Reports sold on the site (Terms of Use, section 6.7). The reports do not include CPF, voter registration number or any other data that is not public, and follow the same correction rule described below.

Radar do Voto is not linked to the TSE and reproduces what is in the source; where the source differs, the source prevails.

Correction or removal of published data. If you appear in this collection and believe something is wrong, contact us (section 2). We check against the TSE file: if the site differs from the source, it is our error and we correct it; if the site reproduces the source, we guide you to contact the TSE itself, and the site follows in the next reimport. Requests to remove correct and public data are reviewed case by case and answered in writing. Court orders are complied with within the set deadline.

11. Changes to this policy

When something really changes (new data collected, new purpose, new provider, new cookie), we change this text before the change takes effect, and we announce it on the site.