Your data, clearly explained
Privacy and cookie notice
Effective August 28, 2026
Controller and scope
StopOver is the controller for personal data processed through this website. This notice applies to visits to stopover.com.br and to the privacy choices available here.
Privacy requests can be sent to privacy@stopover.com.br. This channel handles access, correction, deletion, objection, consent withdrawal, and other data-subject requests.
Data and purposes
- Consent preference: the necessary first-party cookie
stopover_consentrecords analytics and advertising choices for up to 180 days. - Technical requests: the hosting and security infrastructure may process IP address, device/browser data, timestamps, requested URLs, and diagnostic events to deliver and protect the site.
- Optional measurement: after analytics consent, Google Analytics and Google Tag Manager may measure visits, page interactions, and content performance.
- Optional advertising and travel search: after advertising consent, Google AdSense and the Travelpayouts flight widget may process device, referral, approximate-location, and interaction data.
Legal bases
Optional analytics, advertising, and the embedded affiliate search rely on your consent. Necessary preference storage and proportionate technical security processing support site operation, fraud prevention, and StopOver’s legitimate interests, subject to visitor rights and safeguards. Processing may also occur when required to comply with law or exercise legal rights.
Accounts, comments, and direct collection
StopOver does not offer visitor accounts or on-site comments and does not operate an on-site newsletter signup form. This reduces the personal data collected directly by the publication. If an external link or partner page asks for data, that organization’s notice and terms apply.
Sharing, affiliates, and international transfers
Data may be processed by infrastructure providers needed to host and secure the site and, only for categories you allow, by Google and Travelpayouts. These providers may process data outside Brazil under their contractual and legal safeguards. Travel links can be affiliate links; StopOver may receive a commission when a visitor completes a qualifying purchase, without increasing the visitor’s price.
Retention and deletion
The consent cookie expires after 180 days unless you replace or delete it sooner. StopOver does not create a separate account, comment, or newsletter-subscriber database. Infrastructure and consented service data is kept only for the period needed for the purposes above, provider configuration, security, dispute handling, or legal obligations, and is then deleted or anonymized where applicable.
Your choices and LGPD rights
Use “Privacy choices” at the lower-left of any page to accept, reject, change, or withdraw optional categories. Optional services remain off until a choice is granted.
You may ask for confirmation and access, correction, anonymization, blocking or deletion of unnecessary or unlawfully processed data, portability where regulated, information about sharing, review of applicable automated decisions, and revocation of consent. Requests are free and may require proportionate identity verification. You may also petition Brazil’s National Data Protection Authority (ANPD).
Security and children
StopOver uses access controls, encrypted transport, data minimization, and provider security features appropriate to a public editorial site. The site is intended for general travel research and does not knowingly collect personal data from children through accounts or forms.
Changes
We may update this notice when services or legal obligations change. Material changes will be shown through a revised effective date and, when appropriate, a renewed consent request.