Privacy Policy

This policy covers eduardocruz.com and its EC TV section (together, "this site"), operated by Eduardo Cruz, an independent software engineer and fractional CTO based in Recife, Brazil. One policy covers both, because they share the same infrastructure, analytics, and data practices — there's nothing product-specific to separate out.

What I collect

Standard analytics on every page: pages viewed, referrer, approximate location (country/city from IP), device and browser type. I use Google Analytics (GA4) and PostHog for this, including session replay and basic event tracking (e.g. form starts). Neither is used to build advertising profiles.

If you submit a form — the hire inquiry on /hire-me, an AI Sprint request, or a Throughline signup — I collect what you enter: name, email, and your message. If you pay for services via the Stripe checkout on /pricing, Stripe processes and stores your payment details directly; I don't see or store your card number.

EC TV pages may load Google's Reader Revenue Manager (Subscribe with Google) script, which can set its own cookies per Google's own privacy practices.

How I use it

To understand what content and pages are useful, to respond to inquiries, to deliver the services you've paid for, and to keep the site running reliably. I do not sell your data, and I do not share it with anyone beyond the processors named above (Google, PostHog, Stripe) who help operate the site.

Cookies

This site uses cookies set by Google Analytics, PostHog, and (on some EC TV pages) Google's Reader Revenue Manager. You can block or clear cookies in your browser at any time; the site will keep working, though analytics on your visit will be incomplete.

The Throughline plugin and hosted Throughline

The plugin (throughline for Claude Code) runs on your machine. Its diagnosis reads your files locally and uploads nothing: no file contents, paths, file names or findings ever leave your machine.

Usage ping (opt-in). Nothing is sent unless you answer yes when the plugin asks. If you do, each time you run a command it sends exactly four fields: the command name, the plugin version, a timestamp, and an identifier for the repository. That identifier is an HMAC of your git remote URL, keyed with a random secret generated on your machine and never transmitted, so it cannot be matched back to a repository by anyone, including me. I store those four fields and nothing else: no IP address and no user agent. I use them only to count how many distinct repositories use the plugin and whether they keep using it. Ping records are deleted after 24 months. You can turn the ping off at any time (node scripts/consent.mjs off, or set THROUGHLINE_TELEMETRY=0); doing so stops new pings, and you can email me to have existing ones deleted, although the identifier is anonymous enough that I may not be able to tell which are yours.

Hosted Throughline is invite-only and operated for people I work with directly. It holds what the operator and their team put into it: goals, action items, meetings, email and chat threads they choose to import, and answers to questions the agent asked. The plugin hook connects only if you have both connected a repository and entered an API token, sends only that token and the timestamp of the latest answer you already have, and only to eduardocruz.com. I use this data to run the service for that operator and for nothing else; I do not sell it. It is processed by the infrastructure and AI providers needed to run the service, under their own terms. It is kept while the operator's account is active; when the account closes, or on request, I delete it within 30 days (backups roll off within a further 30 days). API tokens are stored only as a hash and can be revoked at any time.

Your rights

You can ask what data I hold about you, ask me to correct it, or ask me to delete it. Email eduardo@eduardocruz.com and I'll respond within a reasonable time. This applies regardless of where you're located — I try to honor GDPR- and CCPA-style requests even outside their strict jurisdiction.

Children

This site isn't directed at children, and I don't knowingly collect data from anyone under 16.

Changes

If this policy changes materially, I'll update the date at the top of this page. Continued use of the site after a change means you accept the update.

Contact

Questions about this policy: eduardo@eduardocruz.com.