Privacy Policy

Last updated: July 31, 2026

Tutela Digitalis ("we," "us," or "our") helps people understand and respond to online scams and fraud. Protecting your privacy is part of that mission. This policy explains, in plain language, what personal information we collect when you use tuteladigitalis.com ("the Site"), why we collect it, how we protect it, and the choices and rights you have. For the purposes of data-protection law, Tutela Digitalis is the data controller for this information, and you can reach us at privacy@tuteladigitalis.com.

Information You Choose to Give Us

We only receive this information when you choose to provide it:

• Case-review form (Get Help). When you submit the form at /get-help, we collect your name, email address, country, the type of scam, an estimated loss range, how urgent it is, your own description of what happened, and whether you have already contacted anyone about it. Because the description is written in your own words, it may include further personal or financial details that you decide to share.
• Newsletter. When you subscribe to our briefing, we collect your email address.
• Consultations. Information you share before or during a consultation, which we treat as strictly confidential.
• Site assistant. If you use the on-site chat assistant, the messages you type are sent to our server to generate a reply. Please do not enter sensitive personal or financial information into the assistant — for help with your specific situation, use the confidential case-review form instead.
• Direct contact. If you email us, we receive your email address and whatever you choose to include in your message.

Information Collected Automatically

• Cookie-based analytics — only with your consent. If you accept analytics cookies, we use Google Analytics 4 to understand how the Site is used (for example, pages viewed, session length, device type, and approximate city-level location). Google Analytics 4 does not log or store IP addresses. If you decline, it is not loaded and this data is not collected.
• Cookieless visit measurement — no cookies, no consent needed. We use Vercel Web Analytics to count page visits and referrers in aggregate, and Vercel Speed Insights to measure how fast pages actually load for real visitors (timings only — how long the page took to render and respond, never what you did on it). Through the same Vercel Web Analytics we also count, in aggregate, which of our own buttons and links people click — for example how many visitors clicked through to the case-review page, roughly whereabouts on the page they clicked, and what kind of page they were on. This records only which of our pages was involved, never the address of the page you came from, never anything you typed, and never anything that could identify you. Both are cookieless and anonymous: it sets no cookies, stores nothing on your device, collects no personal data, and cannot identify you or follow you across other sites. Because it carries none of the privacy trade-offs of cookie-based tracking, it runs without requiring consent.
• Cookieless usability measurement — no cookies, and your typed text is never captured. We use Microsoft Clarity to understand how pages are actually used: how far people scroll, what they click, and where a page appears to confuse or frustrate them. It runs in cookieless mode, so it sets no cookies and stores nothing on your device. It is configured in strict masking mode, which means the text you type is never recorded or uploaded — including anything you enter into the case-review form. Clarity can reconstruct an anonymous picture of how a page was used, such as mouse movement and clicks, but not what you wrote.
• Essential storage. A small amount of information is stored in your browser to remember your cookie choice and keep the Site working. This is necessary for the Site to function and is not used to track you.

Cookies & Your Consent

When you first visit the Site, a banner asks whether you accept analytics cookies. Cookie-based analytics (Google Analytics 4) are not loaded at all unless you choose "Accept." Declining is just as easy as accepting, and the Site works fully either way. The cookieless measurement described above (Vercel Web Analytics, Vercel Speed Insights and Microsoft Clarity) sets no cookies and collects no personal data, so it is not governed by this cookie choice.

You can change or withdraw your choice at any time using the button below:

How We Use Your Information

• To review the cases you submit and respond with guidance.
• To deliver the newsletter you asked for, including scam alerts and protection tips.
• To provide consultation services you have requested.
• To answer messages you send us.
• With your consent, to understand and improve how the Site is used.

We never sell or rent your personal information, and we do not share it for anyone else's marketing. We share information only with the service providers listed below who help us run the Site, or where we are legally required to do so.

Legal Basis for Processing

Where data-protection law (such as the GDPR) applies, we rely on the following grounds: your consent — for the newsletter and for analytics cookies; and taking steps at your request — to handle your case submission, consultation, or message and to respond to you. You can withdraw consent at any time (see "Your Rights" below).

How We Store and Protect Your Information

The Site runs entirely over encrypted HTTPS connections. Case-review submissions are stored within Google's services (Google Workspace), and access is restricted to Tutela Digitalis. We apply reasonable safeguards and limit who can see your information. When your browser reports that it blocked a resource on the Site (a Content-Security-Policy violation), our server records the page address, what was blocked, and your browser's user-agent string, so we can spot misconfigurations and abuse; these logs are short-lived and contain no IP addresses and no personal data. That said, no method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

Data Retention

We keep personal information only for as long as it is needed for the purposes described in this policy. Case-review details are kept while we are assisting you and for a reasonable period afterward for reference, and are then deleted. Newsletter data is kept until you unsubscribe. You can ask us to delete your information sooner at any time.

Service Providers We Use

We rely on a small number of trusted providers to operate the Site. Some are based outside your country, including in the United States:

• Google — Google Analytics 4 (consent-based analytics) and Google Workspace (storage of case-review submissions). Google Privacy Policy
• Microsoft — Microsoft Clarity (cookieless usability analytics; strict masking, so typed text is not captured). Microsoft Privacy Statement
• Vercel — website hosting and cookieless, anonymous Web Analytics and Speed Insights (aggregate visit measurement, clicks on our own links, and page-performance timings, no personal data). Vercel Privacy Policy
• Kit (ConvertKit) — newsletter delivery. Your email address is stored with Kit and used only to send the briefing you signed up for.
• Anthropic — the on-site assistant may use Anthropic's AI service to generate replies to the questions you type.
• Stripe — payment processing for consultations. We never see or store your full card details. Stripe Privacy Policy
• Vercel — secure website hosting.

Consultation Confidentiality

All information shared during consultations is treated as strictly confidential. We do not share case details with any third party unless required by law or with your explicit written consent. Any case studies published on the Site are always anonymized and published only with the client's permission.

Your Rights

Depending on where you live, you may have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to fix inaccurate information.
• Deletion — ask us to delete your information ("right to be forgotten").
• Restriction or objection — ask us to limit or stop certain processing.
• Portability — receive your information in a portable format.
• Withdraw consent — change your cookie choice using the button above, or unsubscribe from the newsletter using the link in any email, at any time.

To exercise any of these rights, email us at privacy@tuteladigitalis.com. We will respond as soon as we reasonably can. If you believe we have not handled your data properly, you also have the right to complain to your local data-protection authority.

Children's Privacy

The Site is intended for adults and is not directed at children under 16. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with a new "Last updated" date, and significant changes will be made clear.

Contact

For any privacy-related question or request, contact privacy@tuteladigitalis.com.