Privacy policy

Last updated: 23/09/2026

What data we process

• Account: name, email, password (stored encrypted) or your Google account identifier, if you sign in with Google.
• Usage: the searches you make, quotas, access dates, country and IP address (security, abuse prevention and to show you your country's currency and payment methods).
• Payments: plan, amount, currency, method and status. Card details are entered directly into the payment provider's secure form and never pass through our servers.

What for and on what basis

To give you access to the service and charge for plans (performance of the contract), for security and fraud prevention (legitimate interest) and to meet legal obligations, including tax obligations.

Who we share it with

Only with the providers that make the service possible — hosting, payment service providers and, if you choose, Google for authentication — and with Meta (Facebook and Instagram), to measure the ads we use to promote Sonar. Always only as far as necessary. We do not sell your data.

How long we keep it

For as long as the account exists. Payment records are kept for the legally required period. You can ask us to delete your account at any time.

Your rights

You have the right of access, rectification, erasure, restriction, objection and portability, and you can lodge a complaint with the Portuguese data protection authority (CNPD — cnpd.pt) or with the authority in your country. To exercise your rights, write to [email protected] from your account's email.

Cookies and measurement

We use essential cookies — the session cookie (to keep you signed in), the language and country cookies, and temporary technical cookies when signing in with Google — and Meta (Facebook and Instagram) advertising measurement cookies. These tell us which ads bring visits, sign-ups and purchases, and let us show Sonar ads to people who have already visited. When you create an account or pay, we also send Meta that event from our server, with the IP address, the browser and your email and name encrypted (SHA-256 hash: Meta does not receive them in plain text), solely to match it to one of their accounts. If you do not want this measurement, write to [email protected]; you can also delete or block these cookies in your browser settings without losing access to Sonar.