Founder & Product Architect

Hi, I'm Marcelo —
I built CookieFácil.

Product designer, privacy engineer and LGPD specialist. I built CookieFácil from scratch to make data compliance accessible to any Brazilian company.

LinkedIn Get in touch

🇧🇷 Ver esta página em Português

Marcelo

Founder · CookieFácil

Experience & Expertise

Three pillars that define how I build and evolve CookieFácil.

Privacy LGPD & GDPR

Architect of CookieFácil's compliance engine — 100% aligned with LGPD and GDPR, with consent traceability, automated DSR, and a complete audit trail for Brazil's data protection authority (ANPD).

Product Design Roadmap & UX

Designer of the consent management system — from the banner to the audit dashboard. Focus on visual hierarchy, zero dark patterns, and regulatory compliance by design.

AI-enabled Development

Architected and built CookieFácil in PHP 8.3 + Slim 4, with a vanilla JS banner under 20kb, Shopify and Nuvemshop integrations, and a multi-layer AI agent orchestration pipeline.

Virtual AI Agile Team

The Virtual Agile Team

15+ specialized agents. 4 layers. Real gates that block deployment.

4 orchestration layers

Strategy → Design → Development → Quality. Each layer has defined authority and a verifiable deliverable.

Real gates — not auto-approval

QA traces every acceptance criterion with evidence. Compliance blocks deploy if any LGPD/GDPR requirement fails.

Parallel execution with fan-in

Dev Agents 1–4 build in parallel with defined file ownership. They converge at Code Review before any phase can advance.

Deploy only with my approval

Nothing ships without explicit founder sign-off. The human is always the final gate — no exceptions.

What I built at CookieFácil

Every feature was designed by me — from technical architecture to user interface.

Consent Banner

Vanilla JS under 20kb with pre-consent script blocking via MutationObserver. Renders in <500ms on mobile 4G.

View features →

Google Consent Mode v2

Native implementation with analytics_storage, ad_storage, ad_personalization, and ad_user_data signals before any Google tag fires.

View implementation guide →

DSR Portal — Data Subject Rights

Multilingual public portal (PT-BR, EN, ES) for access, correction and erasure requests — LGPD Arts. 18-20.

View features →

22 industry verticals — e-commerce, clinics, fintechs and more. Generates LGPD-compliant policies in minutes, no lawyer needed.

Generate free policy →

WordPress Plugin

Official plugin on WordPress.org — 2-minute setup with banner injection via action hook, no code editing required.

View plugin →

Shopify & Nuvemshop

Native apps for Brazil's two largest e-commerce platforms — OAuth, integrated billing and embedded dashboard.

View integrations →

My product philosophy

Compliance first, experience second

Compliance isn't a layer on top of the product — it is the product. Every technical decision starts with LGPD.

Performance is compliance

A slow banner means scripts firing before consent. CookieFácil renders in <500ms — not as a technical nicety, but as a regulatory obligation.

Built for Brazilians

Not a translation of a European product. A system conceived for the reality of Brazilian companies — from micro-businesses to high-volume e-commerce.

AI orchestration as a speed advantage

I build CookieFácil with a virtual agile team of 15+ specialized AI agents — from PM to QA — coordinated by an orchestration pipeline with real quality gates.

Tech stack

PHP 8.3 Slim 4 MariaDB Alpine.js HTMX Bootstrap 5 Vanilla JS Cloudflare CDN Hostinger VPS Claude AI

Product principles

🔒  Block first. Load later. Log everything.

⚖️  Accept and reject buttons with equal visual weight.

🚀  Banner JS < 20kb minified + gzipped.

🇧🇷  Native PT-BR — written by Brazilians.

🔍  Zero PII in logs (IPs hashed with SHA-256 + salt).

Let's talk

I'm available on LinkedIn for conversations about data privacy, consent management, and AI-driven product development.

Connect on LinkedIn cookiefacil.com.br