Privacy Policy

Last updated: 10/10/2026

1. Controller

Miguel Sequeira, self-employed (trabalhador independente), Sítio do Sobral, Ap. 53P, 8400-491 Porches, Portugal, tax ID (NIF) 260272167. Privacy contact: contareels12026@gmail.com.

2. Data we process

  • Account: name, email, password (stored only as a bcrypt hash), role (learner/creator).
  • Usage: lessons watched, seconds and percentage watched, timestamps — needed for access control, progress and creator payouts.
  • Purchases: type, amount, date, Stripe references (session, invoice, subscription, customer). We do not store card details.
  • Reviews and feedback: ratings and comments you choose to submit.
  • Creators: published courses and viewing statistics.

3. Purposes and legal bases (GDPR Art. 6)

  • Providing the service and managing your account — contract.
  • Payments and invoicing — contract and legal obligations (tax retention).
  • Security, fraud and artificial-view prevention — legitimate interest.
  • Feedback and reviews — consent/legitimate interest; optional.

4. Processors

  • Stripe Payments Europe, Ltd. — payment processing and customer portal (Stripe is also an independent controller for some data, see stripe.com/privacy).
  • Render — application hosting.
  • YouTube (Google) — embedded videos are served by YouTube, which may set cookies and process data under its policy.
  • Google Fonts — fonts loaded from Google servers.

Some transfers may occur outside the EEA based on adequacy decisions (EU-US Data Privacy Framework) or standard contractual clauses.

5. Cookies and local storage

  • connect.sid — strictly necessary session cookie (login), HttpOnly, valid up to 7 days.
  • localStorage — chosen language and theme (wc-lang, wc-theme).
  • Third-party cookies may be set by YouTube when playing videos and by Stripe on payment pages.

We do not use advertising or analytics cookies.

6. Retention

Account data: while the account exists. Payment records: 10 years (tax law). Views: up to 24 months for payout calculation and audit. Sessions: up to 7 days.

7. Your rights

Access, rectification, erasure, restriction, objection, portability and withdrawal of consent — request via contareels12026@gmail.com. You may complain to the Portuguese DPA (CNPD, www.cnpd.pt) or your local authority.