Privacy Policy
1. Who we are
iFortaleza (ifortaleza.com) is an independent travel guide for Fortaleza and Ceará, Brazil. This policy explains what data we collect, how we use it, and your rights.
We do not have a legal entity registration number to disclose. For all privacy enquiries, use the contact page.
2. What data we collect and why
2.1 Usage analytics (Google Analytics 4)
We use Google Analytics 4 (GA4) to understand how visitors use the site. GA4 may collect your IP address (truncated), browser type, pages visited, time on site and referring URLs. This data is processed by Google and is subject to Google's privacy policy.
GA4 is only activated after you give consent for analytics cookies. If you decline or use a browser with Global Privacy Control (GPC) enabled, GA4 remains in denied mode and no personal analytics data is sent.
Legal basis (EEA/UK): Consent (GDPR Art. 6(1)(a)).
2.2 Advertising (Google AdSense)
We use Google AdSense to display advertisements. Google AdSense may use cookies and similar technologies to show you relevant ads based on your browsing history across sites. In the EEA, UK and Switzerland, personalised advertising requires your explicit consent under the IAB Europe Transparency & Consent Framework (TCF).
If you are in the EEA/UK/Switzerland and decline advertising consent, Google AdSense will serve non-personalised ads only (or no ads, depending on Google's configuration). You can manage your Google ad preferences at adssettings.google.com.
Legal basis (EEA/UK): Consent (GDPR Art. 6(1)(a)).
2.3 Cookies
We use the following categories of cookies:
- Strictly necessary: Stores your consent preferences (key:
ifortaleza_consent). No personal data is included. Cannot be disabled. - Analytics: Google Analytics 4 cookies (
_ga,_ga_*). Only set after consent. - Advertising: Google AdSense cookies. Only set after consent (EEA/UK/Switzerland) or by default (other regions where personalised advertising is lawful without prior consent).
You can change your cookie preferences at any time via "Privacy Settings" in the footer of any page.
2.4 Affiliate and commercial links
Some links on this site may be affiliate or referral links (for example, hotel booking links). We disclose affiliate relationships clearly. Clicking these links may result in us earning a commission at no extra cost to you. See our Affiliate Disclosure for details.
3. Data sharing
We do not sell your personal data. Data may be shared with Google (Analytics, AdSense) as described above. Google acts as a data processor and data controller depending on context; see Google's Privacy Policy.
4. Data retention
Analytics data is retained in Google Analytics for 14 months (our configured retention period). Consent preferences stored in your browser's localStorage persist until cleared by you.
5. Your rights (EEA/UK)
Under GDPR, if you are in the EEA or UK, you have the right to: access your data, rectify inaccurate data, erase data, restrict processing, data portability, and object to processing. For data held by Google, submit requests directly to Google. For questions about this site's practices, use our contact page.
6. Your rights (United States / CCPA)
We respect the Global Privacy Control (GPC) browser signal. If your browser sends a GPC signal, we automatically set advertising consent to "denied" and you will not receive personalised advertising. California residents may have rights under the CCPA to know, delete and opt out of the sale or sharing of personal information. Because we do not directly sell personal data and use Google's consent framework, opt-out rights are exercised through your browser GPC signal or via "Privacy Settings" in the footer.
7. International data transfers
Data processed by Google Analytics and AdSense may be transferred to and stored in the United States. Google uses Standard Contractual Clauses and other safeguards approved by the European Commission for such transfers.
8. Children
This site is not directed at children under 16. We do not knowingly collect data from children.
9. Changes to this policy
We may update this policy to reflect changes in our practices or legal requirements. The "Last updated" date at the top will reflect the most recent revision.
10. Contact
For privacy enquiries: contact page.