PRIVACY AND COOKIES

Updated October 8, 2026.

This notice explains how The Cursed Company, Brazilian company registration number (CNPJ) 68.671.302/0001-25, processes data on its portfolio website. For privacy questions and requests to exercise your rights, email hello@cursed.company.

Contacting Cursed

We use the information you choose to provide — email, subject and message — to receive and respond to your inquiry and discuss a possible project. Requests for quotes or services are processed to take steps before entering a contract, at your request. Other inquiries are processed on the basis of our legitimate interest in responding, with respect for your expectations and rights.

The form sends your message through Google Workspace to hello@cursed.company, with copies to rafael@cursed.company and otavio@cursed.company. The subject and message are not sent to measurement tools. You can use the form without accepting optional cookies, and submitting it does not subscribe you to advertising. With your consent, your email may be used for ChatGPT Ads advanced matching, as described below.

Optional cookies

Only with your consent, we use Google Analytics 4 to measure visits, pages viewed, traffic sources and campaigns, approximate location, devices, browsers and operating systems. We also measure interest in films, player openings, playback and viewing progress, description openings, contact page visits, form starts and outcomes, and clicks on our channels. This helps us improve the portfolio and understand which content and sources lead to inquiries. The legal basis is consent.

We do not send names, emails, subjects, messages or field values to Analytics. Events contain only predefined information, public routes and public campaign names. We remove other URL parameters and fragments and reduce the referring address to its origin. We do not use session recording, click maps, User-ID, Google Signals or personalized advertising.

After consent, Google Analytics may set first-party _ga and _ga_* cookies to distinguish browsers and sessions. We configure a lifetime of up to 180 days, without renewing it on every visit; browsers may shorten this period. These identifiers are pseudonymous and do not represent a visitor's legal identity. Google receives technical data needed for communication, such as IP addresses; Google states that GA4 does not log or store individual IP addresses.

Event and user data used in explorations are retained for up to 14 months, without restarting that period when new activity occurs. Aggregate reports may be retained longer. See privacy in GA4 and how Google uses information from partner sites.

ChatGPT Ads and advanced matching

With your consent, we load the OpenAI pixel to attribute inquiries to ads in ChatGPT and measure their effectiveness. We record the lead_created conversion only after the server confirms the form was sent. Opening the contact page, typing or attempting a submission that fails does not record this conversion.

Advanced matching is enabled: the pixel may detect the email entered in the form, normalize it and convert it to a SHA-256 hash in the browser before sending it to OpenAI for attribution. This hash is a pseudonymous identifier; it does not make the email anonymous. We do not provide the subject or message to the pixel or add these fields to the event. OpenAI also receives technical information needed for communication, such as IP addresses and browser data, along with attribution identifiers, timestamps and the site origin.

After consent, the pixel may store first-party __oppref cookies, with an ad-click reference and a lifetime of up to 30 days, and __obref cookies, with a browser reference and a lifetime of up to 365 days. Consent recorded by this site expires sooner, within 180 days, and must be renewed to continue measurement. We send events with the option to opt out of their use for future individual ad personalization. See the OpenAI pixel documentation.

Your choice

We request consent only in the cookie notice, and the same choice applies across the site. The form sends your message without requesting additional consent. Sending a message does not authorize cookies: if you declined or have not made a choice, optional measurement remains disabled.

You can accept or reject optional Google Analytics and ChatGPT Ads cookies and change your choice using the PRIVACY button on the site. Rejecting cookies does not prevent you from watching films or sending a message. When you withdraw consent, we block new events from both tools, remove _ga cookies accessible on this domain and instruct the pixel to stop collecting data and remove __oppref and __obref. This does not undo information already sent. We also respect your browser's Do Not Track and Global Privacy Control signals.

We store only your choice, its date and the version of this notice in your browser's local storage for up to 180 days. This record remembers your preference; it contains no individual identifier. Previous consent, which mentioned only Google Analytics, does not enable ChatGPT Ads: we request new consent. If you clear site data or switch browsers, you may need to choose again. If we cannot save your choice, optional measurement remains disabled.

Videos and Vimeo cookies

Films are hosted on Vimeo. When players load, your browser connects to Vimeo and its delivery providers, transmitting technical information such as your IP address and browser data to deliver and protect the videos. We use the dnt=1 privacy parameter to reduce tracking.

According to Vimeo, security cookies such as player_clearance, cf_clearance, _cf_bm and _cfuvid may be used in this mode. Existing cookies from previous visits to Vimeo may still accompany requests. These features support film delivery and security; our cookie controls govern Cursed's optional measurement, not existing cookies from other sites. See player cookies and Vimeo's privacy policy.

Infrastructure, sharing and retention

Vercel hosts the site and processes requests and technical logs for delivery, security and abuse prevention, based on our legitimate interest in keeping the service secure. Google Analytics, Google Workspace, OpenAI and Vimeo participate in the purposes described above. These providers may process data outside Brazil. Processing must comply with the safeguards and international transfer mechanisms established by Brazil's General Data Protection Law (LGPD) and applicable regulations.

Messages and records are retained for as long as needed to respond to an inquiry, carry out a contractual relationship, meet legal obligations and exercise rights. You can request information about retention and deletion through our contact channel. Records required by law or to exercise rights may be retained.

Your rights

Under the LGPD, you may request confirmation and access, correction, information about sharing, anonymization, blocking or deletion where applicable, portability as regulated, objection and withdrawal of consent. You may also petition Brazil's National Data Protection Authority (ANPD). Before responding, we may request proportionate information to confirm your identity and protect your data.