Last updated 26 September 2026
Privacy notice
This notice explains what personal data www.sre-norns.com processes, why, for how long, and how you can control it. It covers this website only. The documentation site, the product demos, and GitHub are separate services.
In short
- The site has no accounts, forms, or advertising.
- Google Analytics runs only if you accept it. Until then, your browser makes no request to Google and no analytics cookies are set.
- The hosting provider processes technical request data, such as your IP address, to deliver pages.
- You can change your analytics choice at any time.
Who is responsible for your data
SRE Norns is run by Ivan Ryabov as an individual. I am the data controller for this website. For any privacy question or request, email norns@sre-norns.com.
Analytics runs only with your consent
When you first visit, a banner asks whether you allow analytics. If you accept, the site loads Google Analytics 4. I use it to learn which sections and articles readers find useful, so I can decide what to write and build next.
Google Analytics is provided by Google Ireland Limited for visitors in the European Economic Area, the United Kingdom, and Switzerland, and by Google LLC elsewhere. Google processes the data on my behalf.
With your consent, Google Analytics collects:
- The pages you view, the page that referred you, and when.
- How long you stay and how far you engage with a page.
- Your browser, operating system, device type, screen size, and language.
- Your approximate location (country and city), derived from your IP address. Google Analytics 4 does not log or store IP addresses.
- A random identifier stored in a cookie, which tells return visits apart from new ones.
Google signals, advertising features, and ad personalization are turned off. The data is not used to show you ads and is not combined with your Google account. I see aggregated reports; I cannot identify you by name from them.
Legal basis: your consent (Article 6(1)(a) of the GDPR and the UK GDPR). Storing analytics cookies on your device also requires your consent under the EU ePrivacy rules and the UK Privacy and Electronic Communications Regulations.
Retention: Google Analytics keeps event-level data for up to 14 months, then deletes it. The analytics cookies expire after two years unless you delete them or withdraw consent sooner.
International transfers: Google may process this data outside the EEA and the UK, including in the United States. Google LLC is certified under the EU–US Data Privacy Framework and its UK extension, and Google also uses standard contractual clauses.
Cookies and browser storage
| Name | Set by | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics, only after you accept | Distinguishes one browser from another | 2 years |
_ga_<ID> | Google Analytics, only after you accept | Keeps track of the current session | 2 years |
norns-analytics-consent | This site, in local storage | Remembers whether you accepted or declined analytics | Until you clear site data |
The consent record is strictly necessary to respect your choice, so it does not require consent. It contains only the word granted or denied and never leaves your browser.
You can change your choice at any time
Withdrawing consent is as easy as giving it. Use (also in the footer of every page) and choose Decline. The site then stops Google Analytics and deletes its cookies. Withdrawing consent does not affect processing that happened before you withdrew it.
You can also block or delete cookies in your browser settings. The site works the same without them.
The hosting provider processes request data to deliver pages
Cloudflare, Inc. hosts this website. To deliver a page, Cloudflare necessarily processes your IP address, the requested URL, the time of the request, and browser headers such as the user agent. It uses this data to serve content and to protect the site against abuse.
Legal basis: my legitimate interest in delivering a working and secure website (Article 6(1)(f) of the GDPR and the UK GDPR). Cloudflare may process this data outside the EEA and the UK. Cloudflare is certified under the EU–US Data Privacy Framework. See the Cloudflare privacy policy for its retention periods.
Email is used only to reply
If you email me, I use your address and message to reply and to keep track of the conversation. I delete them when they are no longer needed for that purpose. Legal basis: my legitimate interest in answering messages sent to me (Article 6(1)(f)).
Links to other sites follow their own policies
The site links to GitHub, the documentation site, and the product demos. When you follow a link, the destination's privacy policy applies.
Your rights
Under the GDPR and the UK GDPR, you have the right to access, correct, or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise a right, email norns@sre-norns.com. I will reply within one month.
Analytics data is pseudonymous. I cannot look it up by your name or email address. To delete it at the source, decline analytics and clear the site's cookies; Google then cannot link future visits to past ones.
You also have the right to complain to a data protection authority, usually the one in the country where you live or work. In the United Kingdom, that is the Information Commissioner's Office.
No automated decisions and no sale of data
The site makes no automated decisions about you, does not profile you, and does not sell or share personal data for advertising.
Changes to this notice
If the site starts collecting different data, I will update this notice and the date at the top before the change takes effect.