Privacy Policy — Hub GTA

Last updated: August 4, 2026

The Hub GTA, accessible in hubgta. with, is committed the transparency, security and protection of personal data of its users. This Privacy Policy explains how we collect, use, store and protect your information in accordance with the General Personal Data Protection Act (LGPD — Law No. 13.709/2018).

1. Data controller

The processing of personal data collected on this site is carried out by the administration of Hub GTA.

Website: https://hubgta.com
Contact for privacy and data protection: [email protected]

2. Personal data collected and purposes

Registration and authentication

Data: Username, e-mail address and password.

Security: the password is stored in a protected way by cryptographic hash through the native Django infrastructure.

Purpose: create the account, allow access to restricted areas and authenticate the session.

Google Login

When the user chooses to sign in with Google, Hub GTA receives only the basic information authorized by the user: name, verified email address and Google account identifier. The profile photo is not imported or stored by Hub GTA.

The username is created automatically from the email. If it already exists, the system adds a numbering to generate an exclusive name. The user can change it later on the account page as long as the new name is available.

Interactions in the community

Data: published comments and likes or reactions records.

Purpose: publish the interactions on the site and assign them to the user profile. Comments may remain associated with the content until its exclusion, respected legitimate requests of the holder and applicable legal obligations.

User Preferences

Data: chosen language and cookie consent preferences.

Purpose: remember browsing options and make available the site in the chosen language. Machine translation services may be used to offer content in different languages.

Technical data and access records

Data: IP address, date and time of access, browser data, device and pages accessed.

Purpose: comply with legal obligations, prevent attacks, detect fraud and ensure the stability and security of the system. Access records may be maintained for the period required by applicable legislation, especially by the Internet Civil Mark.

Important: the Hub GTA does not request or collect residential address, telephone, number, financial data or checkout and payment information.

3. Infrastructure and services of third parties

  • Django e PostgreSQL: used in processing and storing accounts, comments, preferences and other operational data.
  • Railway: cloud hosting provider of application and database.
  • Cloudflare: CDN service, DNS and security, used to improve performance and protect the site against malicious traffic, bots and denial of service attacks.
  • Google OAuth: used in Google login, limited to basic scopes of identification, name and email.
  • Google AdSense: advertising service that may use cookies and identifiers, as applicable, for display and measurement of ads.
  • Google Analytics: can be used when enabled for statistical analysis of traffic and improvement of content.
  • Google reCAPTCHA: may be used when enabled to protect forms against spam and abuse.

We don't sell or rent personal data. Information may be shared only when necessary for technical operation of the website, compliance with legal obligation or compliance with the competent authority order.

4. Storage and security

We take reasonable technical and administrative measures to reduce risks of unauthorized access, loss, alteration or undue disclosure. The data shall be kept only for the time required to comply with the informed purposes or for the time required by law.

5. Rights of the holder

In accordance with LGPD, you may request:

  • confirmation of the existence of treatment;
  • access to registered personal data;
  • correction of incomplete, inaccurate or outdated data;
  • anonymisation, blocking or deletion of unnecessary or processed data in non-conformity;
  • withdrawal of consent for optional cookies and other consent-based activities;
  • exclusion from the account and personal data, except where the legislation requires retention;
  • information on sharing and portability, where applicable.

To exercise your rights, send a message to [email protected].

6. Updates of this policy

This Policy may be updated to reflect legal, technical or operational changes. The date of the latest version will remain indicated at the beginning of the document.