X Secret
Privacy Policy

Terms of Use

Last updated: September 7, 2026

Essential notice. This service may never, under any circumstances, be used to monitor, track, locate or watch any person without that person's free, informed, specific and prior consent. It is strictly forbidden to use the platform for stalking, domestic or gender-based violence, control of partners, control of relatives or employees without their express knowledge, covert investigation, blackmail, extortion or any form of coercion. Such conduct may constitute criminal offences under Brazilian law — including stalking (art. 147-A of the Penal Code), violation of privacy, unauthorised access to a computer device (art. 154-A), unlawful coercion and threat — as well as civil wrongs subject to compensation, and comparable offences in other jurisdictions.

1. Acceptance of the Terms

These Terms of Use (“Terms”) govern access to and use of the X Secret platform (“Platform”, “Service”), available at dog-feliz.lovable.app. By creating an account, signing in or using any feature, you declare that you have read, understood and fully accept these Terms and the Privacy Policy, which is an inseparable part of this document.

Acceptance is recorded electronically at sign-up and at every authentication, through the mandatory tick box. If you disagree with any provision, do not use the Service.

2. Definitions

  • User: a natural person, over 18 years old and legally capable, who creates an account and generates links on the Platform.
  • Data subject: a natural person who opens a link generated by a User and whose personal data may be collected, under Law No. 13,709/2018 (LGPD) and equivalent data protection laws.
  • Location data: latitude, longitude, estimated accuracy, address obtained by reverse geocoding and the history of points collected during a sharing session.
  • Link: a short address generated by the User that displays a consent notice before redirecting the data subject to the destination.

3. Description of the Service

The Platform allows the generation of links that, when opened, show a notice to the data subject and request browser permission to share location. With express authorisation, the position is recorded and may be updated periodically while the page stays open and within the maximum defined period (up to 8 hours). The User responsible for the link may consult a report with date, time, coordinates, approximate address, map and any other collected points.

Sharing always depends on double authorisation: the confirmation on the notice screen and the permission granted to the data subject's own browser. The data subject may stop sharing at any moment by closing the page or revoking the location permission in the browser or operating system settings.

4. Registration and account

Registration requires a valid email and password, or authentication through an external provider. The User is solely responsible for the accuracy of the information provided, for safeguarding credentials and for all activity carried out in the account. Accounts may not be shared, assigned or resold. Suspected unauthorised access must be reported immediately through the contact channels.

People under 18 may not register or use the Service.

5. Mandatory consent of the data subject — the core rule

By generating and sharing a link, the User acts as the controller of the personal data collected, under art. 5, VI, of the LGPD, assuming all corresponding legal obligations. At a minimum, the User undertakes to:

  • Obtain, before sending the link, free, informed, unambiguous, specific and highlighted consent from the data subject for the collection and monitoring of location (arts. 7, I, and 8 of the LGPD);
  • Inform the data subject of the concrete purpose of the collection, the processing period and with whom the data will be shared;
  • Never use deception, disguise, false pretext, pressure or any trick to induce the click;
  • Answer the data subject's requests for confirmation, access, correction, portability, anonymisation, deletion and withdrawal of consent (art. 18 of the LGPD) within the legal deadline;
  • Delete the data when the purpose ends or when consent is withdrawn;
  • Not collect data of children and adolescents, except with specific and highlighted consent from at least one parent or legal guardian (art. 14 of the LGPD);
  • Notify the data subject and the supervisory authority of any security incident under their responsibility (art. 48 of the LGPD).

Using the Platform to locate someone without consent is a serious breach of these Terms and of the law. Civil, administrative and criminal liability for such use lies exclusively with the User.

6. Prohibited conduct

  • Tracking, following or watching a person without valid and current consent;
  • Stalking, threatening, harassing, coercing, humiliating or intimidating any person;
  • Using the Service in contexts of domestic, family or gender-based violence, even under an allegation of suspicion;
  • Hiding the identity of the link sender to mislead the data subject about its origin or purpose;
  • Creating links that imitate brands, financial institutions, public bodies or third-party services (phishing);
  • Distributing malware, illegal content, hate speech, child sexual material or content that infringes copyright;
  • Automating access, scraping, reverse engineering, unauthorised intrusion testing or circumventing technical limits;
  • Reselling, sublicensing or commercially exploiting the Service without written authorisation;
  • Combining collected data with other databases to build surveillance profiles or selling location data to third parties.

7. Moderation, suspension and termination

We may, at any time and without prior notice where there is risk to people, disable links, suspend or terminate accounts and preserve records in the face of evidence of a breach of these Terms, a court order, a request from a competent authority or a substantiated report. Termination does not give rise to any right to compensation.

8. Roles in data processing

Regarding data subjects' data collected through links, the User is the controller and the Platform acts as processor, handling the data according to the User's instructions and legal limits. Regarding the User's own account data, the Platform acts as controller. Details are in the Privacy Policy.

9. Intellectual property

Software, brand, layout, texts and other elements of the Platform belong to their owners and are protected by Law No. 9,610/1998 and Law No. 9,279/1996 and by applicable international copyright and trademark law. The User is granted a personal, limited, non-exclusive, revocable and non-transferable licence of use, solely for the purposes set out in these Terms.

10. Disclaimers and limitation of liability

The Service is provided “as is”, with no warranty of uninterrupted availability, absence of errors or accuracy of the coordinates reported by the data subject's browser. Location accuracy depends on the device, the network and factors beyond our control.

To the maximum extent permitted by law, we are not liable for indirect damages, loss of profits, loss of data or misuse of the Service by the User. The User agrees to indemnify and hold the Platform harmless against third-party claims, administrative sanctions and judgments arising from their use of the Service, including fees and costs.

11. Changes to the Terms

These Terms may be updated to reflect legal or functional changes. Relevant changes will be announced on the Platform or by email. Continued use after the new version takes effect implies acceptance.

12. Governing law and jurisdiction

Law No. 13,709/2018 (LGPD), Law No. 12,965/2014 (Brazilian Internet Bill of Rights), Law No. 8,078/1990 (Consumer Protection Code) and other Brazilian rules apply. The courts of the User's domicile are elected to settle disputes.

13. Contact

Questions, reports of misuse and requests regarding personal data may be sent to the data protection officer (DPO) at privacidade@dog-feliz.lovable.app.