Last updated: 25 September 2026
This policy explains which personal data FinLeak may process, why it is used and the rights available to users.
1. Data controller
Controller: Grup de desarroladors de Finleak
Project: FinLeak
Contact: finleak.contact@gmail.com
2. Data we may collect
The contact form may process your email address, optional name, subject and message. The server may create technical security logs such as IP address, date, time and browser information. Analytics cookies are only enabled with consent.
3. Purposes
Data is used to answer enquiries, secure and operate the website and, with consent, produce aggregate usage and traffic statistics. Form messages are not used to build financial profiles or generate AI articles.
4. Legal basis
The form and optional analytics rely on consent. Service security may rely on legitimate interests.
5. Retention
Messages are kept only as long as needed to handle the enquiry and any legal obligations. Technical logs are retained only as necessary. Analytics retention is described in the cookie policy.
6. Providers
FinLeak may use providers required for hosting, email, security or traffic measurement, limited to services that are actually enabled.
7. Rights
You may request access, correction, deletion, restriction, objection and portability where applicable, and withdraw consent, by contacting finleak.contact@gmail.com. You may also complain to the Spanish Data Protection Agency.
8. Children
Children under 14 should not submit data without permission from a parent or legal guardian.
9. Security
FinLeak applies reasonable technical safeguards and the public website uses HTTPS.
10. Cookies
The cookie policy explains which cookies are used and how to change your preferences.
11. Changes
This policy may be updated when the project, services or applicable rules change.
12. FinLeak first-party analytics
With consent, FinLeak records the page path, referrer domain, approximate device category, date and time, and random identifiers hashed on the server. It does not store names, email addresses, IP addresses, full browser strings or URL query parameters. Records are deleted after fourteen months.
13. Google Analytics 4
GA4 loads only after analytics consent. FinLeak does not enable advertising features or ad personalisation.
14. Automated decisions
Browsing data and form messages are not used for automated decisions with legal effects or financial profiling.