Privacy

Aggregate measurement of the public pages

We measure only four technical signals: page load, reading visible for 15 seconds, and passing 50% or 90% of the page. Each signal increments a daily total per route family. We do not keep one row per visit.

The aggregate record contains no cookies, no local storage, no person or session identifiers, no IP address, no browser agent, no referrer, no search parameters and no search terms. As in any web request, the infrastructure receives the network address during the connection, but it is not sent to the measurement API and is not associated with the counts.

The “Do Not Track” and Global Privacy Control signals switch collection off on the device. The counts may include robots and reloads, so they are not presented as people, sessions, retention or conversion.

Optional Google Analytics

Google Analytics loads only after you accept. It receives connection data, such as network address and browser type, plus visits with the site's fixed root address. We send no page paths, searches, query parameters or referring pages. Its analytics cookie lets Google estimate distinct browsers. We exclude the personal and editorial areas and keep advertising and personalisation signals off.

The choice stays in this browser and can be changed on any page through “Measurement preferences”. Do Not Track and Global Privacy Control keep Google Analytics switched off.

Notes about errors on the pages

The corrections form requires no account, no name and no address. We keep what you write, the page reference you attach, the language of the page and the moment the note arrived. The reply address is optional: without it no contact is kept, and the note arrives just the same.

The network address of whoever writes is not kept. To stop abuse, the page derives from it a pseudonymous key that does not allow it to be reconstructed, and that key is removed within a maximum of 24 hours after it stops being active.

The note stays in the same database as the rest of the site, is read only at the editorial desk, and is not forwarded to email, to external forms or to any other provider.

The basis is the request you address to us: we process what you write in order to check the source and correct what is wrong, and the address, when you leave one, only to reply to you about that matter.

Controller and contact for the personal area

Data controller: to be identified before activation. Requests about personal data: contacto [at] impactopublico.pt.

Data and purpose of the personal area

We process the verified email address in order to maintain the account. When sign-in with Google is active, we also keep the stable identifier of the Google account and the address confirmed at the last sign-in. We do not keep Google access or refresh tokens and we do not request access to Drive, contacts or calendar. The dossier list serves only to provide the follow-up requested.

If a person takes a position on a dossier, we keep only the current choice, the dossier, the moment and the version of the explicit consent. The choice may reveal political opinion, so it is not published as a profile, a list of participants or an individual history. Withdrawal deletes the position instead of keeping earlier versions.

Sessions and pseudonymous rate-limiting keys protect the account against abuse. We do not create public profiles, behavioural advertising or automated decisions about people.

The basis for the account and for the follow-up is the provision of the service requested. Processing the position depends on the explicit consent presented alongside the choice. A person may withdraw that consent by deleting the position, without affecting the lawfulness of the earlier processing, and may delete the whole account in the personal area.

Retention

• The account and the list are kept until the account is deleted. Each position is kept only while it is the current choice and is erased when the person withdraws it.
• A session ends after 14 days or after 7 days without use.
• When optional measurement is accepted, Google Analytics cookies have a configured maximum lifetime of 90 days and that period is not renewed on every visit. A later refusal removes them from this domain.
• The pseudonymous rate-limiting records are removed within a maximum of 24 hours after they stop being active.
• A note about an error on a page is erased 180 days after it arrives.
• The reply address that accompanies it, when there is one, is erased as soon as the matter has been dealt with and, in any case, 90 days after the note arrives.

Providers

Hosting is provided by OVHcloud. When a person accepts optional measurement, Google processes the related data under its Google privacy policy. We neither sell nor pass on address lists.

Your rights

The personal area allows the data to be exported in JSON and the account to be deleted. You may also request access, rectification, restriction or objection through the contact given above or through the corrections form, leaving a reply address. You have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados.