Privacy Policy

Last updated: October 2026

NIBS Education operates the website nibseducation.com. This policy describes what information is collected when you visit this site and how it is used.

---

1. Information We Collect

We do not collect any personal information through forms, registrations, or accounts. However, like most websites, we use a third-party analytics service that automatically collects certain technical data when you visit:

• IP address (anonymised by Google before storage)
• Browser type and version
• Operating system and device type
• Pages visited and time spent on each page
• Approximate geographic location (country/city level, derived from IP)
• Referral source (how you arrived at the site)

This data is collected via Google Analytics 4 and processed by Google LLC on our behalf. We use it solely to understand how the site is used and to improve its content.

2. Cookies

Google Analytics sets cookies in your browser to distinguish visits and track sessions. These cookies do not identify you personally. You can disable cookies in your browser settings at any time, or use a browser extension such as the Google Analytics Opt-out Add-on to prevent data collection entirely.

3. Clinical Tools: What Stays on Your Device

The TMS Safety Calculator and cognitive task tools run entirely in your browser. Any data you enter (protocol parameters, medical history responses, session history) is stored exclusively in your browser's localStorage and never leaves your device. Clearing your browser data removes it permanently.

4. When Data Does Leave Your Device

Two features send data outside your browser. Both are optional: the tools work fully without them.

• Sending a report by e-mail. If you use the e-mail button on the report screen, the CSV file (which may contain the patient's name and assessments) is sent to our serverless function and from there to Resend, the service that delivers the message. We do not store the file; Resend keeps delivery records according to its own policy. Consider whether e-mail is an appropriate channel for that patient's data before using it.
• Professional account. If you create an account, the e-mail address, password (stored encrypted, never visible to us), name, profession and registration number you provide are kept on Supabase infrastructure in the São Paulo region. Patient data is not sent to the account: it remains in your browser, as described above.

5. Third-Party Services

We use the following external services:

• Google Analytics 4 — website traffic analysis. Google's privacy policy: policies.google.com/privacy
• Google Fonts — typography. Fonts are loaded from Google's servers, which may log your IP address.
• jsDelivr CDN — delivery of Bootstrap and Chart.js libraries.
• Vercel — hosting. Serves the pages and runs the function that forwards reports by e-mail. Access logs may record your IP address.
• Resend — e-mail delivery. Receives the recipient address and the attached report when you use that feature: resend.com/legal/privacy-policy
• Supabase — professional account database, in the São Paulo region: supabase.com/privacy

6. Legal Basis (LGPD)

This website is operated in Brazil and complies with the Lei Geral de Proteção de Dados (LGPD, Lei nº 13.709/2018). Analytics collection is based on our legitimate interest in understanding how the site is used (Art. 7º, IX), limited to aggregated, anonymised traffic data. Professional account data is processed to provide the service you requested (Art. 7º, V).

About patient data. You, the healthcare professional, are the controller of any patient data you handle through the tools. We do not decide what is collected or why. When you send a report by e-mail, we act only as an operator, forwarding the file at your request without storing it. Health data is sensitive personal data under Art. 11 of the LGPD, and the legal basis for handling it, normally the patient's specific consent or the protection of health under Art. 11, II, "f", is your responsibility, not ours.

7. Your Rights

Under the LGPD you have the right to:

• Confirm whether your data is processed
• Request access to your data
• Request correction or deletion of your data
• Withdraw consent or object to processing
• Lodge a complaint with the ANPD (Autoridade Nacional de Proteção de Dados)

To exercise these rights, contact us at tslopes.physio@gmail.com.

8. Data Retention

Google Analytics retains user-level data for 14 months by default, after which it is automatically deleted. Aggregated, non-personal reports are retained indefinitely.

9. Changes to This Policy

We may update this policy as the site evolves. The date at the top of this page reflects the most recent revision. Continued use of the site after changes constitutes acceptance of the updated policy.

10. Contact

NIBS Education
tslopes.physio@gmail.com