# Privacy and Cookie Policy of the featureloom.com website

 

This policy concerns the public website featureloom.com (not the application app.featureloom.com, which has its own privacy policy and terms of service). Version 1.2. Effective from 2026-11-01.

## 1. Controller

The controller of the data of visitors to the website is VIGELION Tomasz Czubkowski, ul. Wiosenna 25, 60-185 Skórzewo, Poland, tax ID (NIP) 973-024-00-52 (“we”). Contact: privacy@featureloom.com. 

## 2. What the website does with your data

1. Before traffic reaches our website server, it passes through Cloudflare and our proxy server. The proxy server records the IP address, the full page address (when you arrive from an ad, also the click identifier) and the technical data that the browser sends with the request, without cookies, for about 4 days, and less under heavy traffic; error entries go to its shared log, limited in size and overwritten. We do this on the basis of our legitimate interests in security (Article 6(1)(f) GDPR). The IP address is necessary to display the page. Cloudflare, Inc. (USA) processes this data as our processor on the basis of an adequacy decision (the EU-U.S. Data Privacy Framework, under which it is certified; should the certification lapse, standard contractual clauses from its data processing agreement, a copy on request) and according to its own periods (cloudflare.com/privacypolicy); when Cloudflare shows you a security challenge, it is also a separate controller of the data from that challenge (cloudflare.com/turnstile-privacy-policy). 
2. With your consent the website measures visits (Google Analytics 4) and the effectiveness of Google Ads advertising: whether a visit from an ad ended with a click on the button leading to sign-up. 

## 3. The consent window and how to change your consent

1. On your first visit the website asks for consent to two categories: **Analytics** and **Advertising** (measuring the effectiveness of ads). Before you choose, nothing goes to Google. 
2. Consent is your choice in the window (the “Accept all”, “Reject all” and “Settings” buttons). The website works without a choice. 
3. We record your choice in each category and every withdrawal on our side with a random identifier, the date and the version of the list of purposes, without the IP address, and keep them for 5 years to be able to demonstrate consent (Article 6(1)(c) and Article 7(1) GDPR). 
4. You can withdraw consent at any time through “Cookie settings” in the website's footer. After the withdrawal we remove from the browser the Google cookies and entries of that category stored on our domain, and the loaded measurement stops working. 
5. Legal basis: consent, voluntary (Article 6(1)(a) GDPR). Cookies and entries necessary for the website to work and for its protection do not require consent.

## 4. Cookies and browser storage

The “Cookies” page lists the website's cookies and entries with their purpose, provider and duration. 

When you arrive from an ad, Google also stores its own cookies on its domains (google.com, doubleclick.net, googleadservices.com), which the website cannot remove; you can remove them in your browser's settings. Description: business.safety.google/adscookies.

## 5. Google: what it receives and where it processes

1. The provider of Google Analytics 4 and Google Ads is Google Ireland Limited; the data may be processed by Google LLC in the USA on the basis of the EU-U.S. Data Privacy Framework and of standard contractual clauses. How Google uses information from sites and apps that use its services: policies.google.com/technologies/partner-sites. 
2. Google Analytics 4 receives: a pseudonymous identifier from the `_ga` cookie, the pages visited, the time, the kind of device and browser, an approximate location determined from the IP address; it keeps event data for 2 months. The advertising tag receives the IP address, browser data, the page address, the ad click identifier and the conversion event; Google keeps them according to its policies (policies.google.com/technologies/retention).
3. For Google Analytics Google is our processor (business.safety.google/adsprocessorterms). For the Google Ads tag, in the phase of collecting and transmitting the data we are responsible jointly with Google, and the further processing at Google is carried out by Google as a separate controller (business.safety.google/adscontrollerterms); we are responsible for the information on the website and for consent, Google for the processing on its side. 

## 6. Your rights

You have the right of access to your data, to rectification, erasure, restriction of processing, portability of measurement data, to withdraw consent at any time (without affecting the lawfulness of processing before the withdrawal) and to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl).

**Right to object.** You may object to the log of the proxy server (point 2) on grounds relating to your particular situation.

Data from cookies does not allow us to identify you; to a request concerning measurements you can attach the value of your `_ga` cookie, and you can also address the request to Google (policies.google.com/privacy). Write to privacy@featureloom.com; we reply within one month.

## 7. Changes

We inform about a change to this policy on the website.