Last updated: 30 September 2026
Feitura ("we") operates feitura.com. This policy explains what we collect, why, and your rights under the GDPR (RGPD).
What we collect
Our first-party analytics. We measure visits with our own system: pages viewed, referrer, UTM tags, device type, browser, country (from a network header), and a pseudonymous visitor identifier stored in a first-party cookie (_fwid, 13 months). We do not use Google Analytics or fingerprint devices. Optional Google Ads measurement is described separately below. We keep the IP address of each visit, to tell real visitors from automated traffic and to protect the site. If you sign in to an account, the visits made from that browser are associated with it, so we can support you and understand how you found us. Raw analytics, IP addresses included, are deleted after 13 months.
Engagement and purchases. We measure time while pages are visible, scroll milestones, catalogue searches and result counts, product options, preview videos and screenshots, and form starts, submissions and outcomes. Form field values are not copied into analytics. Search and campaign labels are shortened and common email, phone and token patterns are redacted. Referrers and external links retain only the site origin. Confirmed enquiries, template and ebook purchases, refunds and download requests can be linked to the originating visit and its acquisition source. We do not record screens, keystrokes or card details.
Our demo and project sites. Sites we build and run on feitura.com addresses (such as a pitch demo at name.feitura.com) are measured by the same system, kept apart from feitura.com's own figures. Where such a site recognises returning visitors, the identifier is a random value kept in the browser's local storage (feitura_id) instead of a cookie; otherwise nothing is kept on the device and the IP address is not stored. The same limits apply: no third parties, no fingerprinting, form contents never copied, 13 months. Opening any of those sites with #feitura-ignore at the end of its address stops counting that browser there.
Forms. When you request an estimate, book a call or contact us, we store the details you provide (name, email, and anything you write) to reply and follow up. If you had visited the site before, your form is linked to your anonymous visit history so we can serve you better.
Ebook purchases. When you buy the ebook, we store your email, your name and the invoice details if you give them, the country you declare, the billing and card country Stripe reports, the country of your connection, the exact consent text you accepted and when, and your downloads. We use them to deliver the files and their updates, to apply the tax rules that depend on where you live, to prove your withdrawal consent, and to issue the invoice. An account is created automatically for your email address so you can download again; you can ask us to close it. Order records are kept for as long as Portuguese tax law requires.
Client portal. If you become a client, we store your account, project data, messages, files and invoices for the duration of the relationship and any legal retention periods.
Google Ads purchase measurement (optional)
With your consent, we load the Google Ads tag on the ebook pages to measure whether an advertisement led to a confirmed ebook purchase. Until you accept, the tag does not load and we send no Google Ads measurement requests. Refusing does not affect checkout or downloads.
Google may receive advertising click identifiers, technical connection/browser data and, after a confirmed payment, the purchase amount, currency and an opaque transaction identifier used to avoid duplicate counts. We do not include your name, email, payment details, private order address or download links in the conversion event. Enhanced conversions and personalised advertising are disabled in this integration.
Advertising attribution cookies (_gcl_*) normally last up to 90 days. We store your choice in this browser for 180 days, and a local purchase marker prevents repeat submissions. You can withdraw consent or accept later through Measurement preferences in the footer; withdrawal stops future purchase events and removes accessible advertising attribution cookies. Google processes received data under its Privacy Policy, which describes its international transfers and safeguards. Withdrawal does not undo processing already performed with consent.
Google sign-in (optional)
You can choose to connect a Google Account to an existing Feitura account after confirming your Feitura password. For sign-in, we request only basic identity permissions (openid, email and profile). Google returns an account identifier, your email address and whether it is verified, and may also return your name and profile-picture address.
We use the Google account identifier and verified email to maintain the connection and recognise you when you sign in. We store that identifier, email, the link to your Feitura account, and when the link was created and updated. We do not save the Google name or profile picture, or retain Google sign-in access or refresh tokens. We never receive your Google password. Google sign-in does not give us access to your Gmail messages, Drive files, contacts or calendar.
Google receives the authentication request and processes it under its Privacy Policy. The account-link records we keep are stored with our hosting provider as part of operating your Feitura account. We do not sell Google sign-in data or share it for advertising.
We keep the link while it is connected to your Feitura account. You can remove it at Google sign-in settings, with your Feitura password: this deletes the link from our active account records and prevents future sign-ins through that link, but does not end sessions already signed in. Deleting your Feitura account also deletes its Google-account links. You can separately revoke Feitura's access in your Google Account connections; revoking access there does not by itself delete the link stored by Feitura. Password sign-in remains available, and you can contact [email protected] to request account deletion.
Legal bases
Legitimate interest (first-party audience measurement, replying to inquiries), contract (client portal, projects, billing, ebook purchases), consent (optional Google Ads measurement), and legal obligation (invoicing records; for ebook purchases, the tax evidence of the buyer’s country and the order confirmation).
Processors
Payments are processed by Stripe (we never see your card number). Email is delivered by our email provider. Hosting is within the EU.
Your rights
Access, rectification, erasure, portability, restriction and objection — write to [email protected] and we will reply promptly. You may complain to the CNPD (cnpd.pt).