Privacy Policy
This policy explains how Ontoom (ontoom.com.br) handles personal data, cookies, audience measurement, and advertising. It applies if you visit the site, use the in-browser tools, or send a message through the form.
Updated: October 5, 2026
Who is responsible
The team that operates Ontoom is responsible for information you send through the contact form and for the cookie and script choices on this site. To request access, correction, or deletion, write to ontoomtools@gmail.com or use the Contact page.
There is no published support phone number. We do not ask for an identity document to use the tools.
What we collect
Contact form. Name, email, and message are sent through Web3Forms to ontoomtools@gmail.com, only so we can reply. Do not put a password, token, or real customer data in that form.
In-browser tools. Generating or validating CPF, CNPJ, QR codes, Base64, JWT, and similar utilities happens on your device. That content is not sent to Ontoom merely because you used the tool. Favorites, local history, theme, and dynamic QR campaigns stay in browser storage (localStorage) and you can delete them by clearing site data.
Measurement and ads. The site loads Google Analytics (aggregate audience), Microsoft Clarity (heatmaps and session replay), and Google AdSense for ads. Those providers may receive technical identifiers, pages viewed, and, with Clarity, a replay of how you interact with the page. We do not intentionally submit tool output to those services, but a third-party script can record what is visible on screen.
Hosting logs. Vercel and the delivery network may log IP, user-agent, and URL for security and operations.
Sign-in. If an account UI is shown, Clerk processes the account email and session under its own policy. The tools do not require an account.
Why we use it
To reply to support, correction, and privacy messages. To operate the site and understand, in aggregate, which pages are used. To show ads so the tools can stay free. To meet a legal duty when a valid authority request exists.
We do not sell contact lists. We do not use the form for an automatic newsletter.
Cookies and similar technologies
Essential cookies and local storage remember preferences such as theme. Analytics and advertising cookies and identifiers come from Google Analytics, Microsoft Clarity, and Google AdSense when those scripts load.
You can block third-party cookies and scripts in the browser or with a privacy extension. That can stop personalized ads and audience measurement. Tools that run only in the browser remain usable.
Clarity may mask some of what you type, but do not assume every keystroke is hidden: do not paste production secrets on any page.
Google AdSense
We may use Google AdSense to show ads. Google and its partners may use cookies to serve ads based on visits to this site or others.
You can turn off personalized ads in Google Ads Settings. Google’s policy describes what the provider does with those identifiers.
Publisher ID for this site: pub-4592545181088283. An ad does not change a tool’s result.
Sharing and retention
We share data only with parties that need it to operate the service:
- Web3Forms, to deliver the contact message to our email
- Vercel, to host the site
- Google (Analytics and AdSense) and Microsoft (Clarity), for audience and ads
- Clerk, only if you use sign-in when it is available
Contact messages are kept as long as needed to reply and to meet legal duties, then deleted or no longer tied to you. We do not keep a server database of generated CPF numbers, because that generation does not pass through the server.
Your rights
Where Brazil’s Law 13.709/2018 applies, you may request confirmation, access, correction, anonymization, portability, deletion of unnecessary data, and information about sharing.
Send the request to ontoomtools@gmail.com with the subject “Privacy” and the email you used on the form, if any. We may ask for the minimum needed to confirm the request is yours. You may also contact Brazil’s national data protection authority.
Visitors elsewhere may have additional rights under their own law.
What we do not do
We do not buy or sell databases of CPF, CNPJ, or other documents. We do not query the Brazilian tax authority from the tools. We do not ask you to upload a real document to “unlock” a generator.
A number produced here is test data. Treat it as a fixture, not as an identity.
Children and changes
The site is not directed at children. We do not knowingly collect a child’s data. If you believe a contact message includes a minor’s data, ask for deletion at the email above.
If a translation conflicts with the Portuguese text, Portuguese prevails. The date at the top is the current version. Continued use after an update means you have read the new version.