Skip to main content

Privacy Policy

Last updated: 13 April 2026

This policy explains how offon.dev (the "Site") collects and uses data, what rights you have under the General Data Protection Regulation (GDPR, EU 2016/679), and how to exercise those rights.

1. Data controller

The data controller for this Site is the offon.dev moderation team. You can contact us at any time:

This Site does not have a designated Data Protection Officer (DPO) because it is operated by a small volunteer community and does not engage in large-scale or systematic processing of personal data. The contact above is responsible for all data protection matters.

2. What data we collect and why

Analytics cookies (Google Analytics 4)

We use Google Analytics 4 (GA4) to understand how visitors use the Site. This helps us improve content and navigation. GA4 collects:

  • Pages visited and time spent on each page
  • Referring website or search query
  • Approximate geographic location (country or region, not precise location)
  • Browser type, operating system, and screen size
  • Interactions such as link clicks

Legal basis: Consent (Article 6(1)(a) GDPR). We use Google Analytics Consent Mode v2 in gated-load mode, which means no data of any kind is sent to Google until you click Accept on the cookie banner. The Google Analytics script itself is not loaded until that point.

If you accept: Google Analytics sets two cookies on .offon.dev: _ga and _ga_<id>. They have a 180-day lifetime. They contain a randomly generated client identifier used to aggregate page views and click events into anonymous session and user counts.

If you decline or do not respond: No data is sent to Google. No cookies are set. The Google Analytics script is never loaded.

You may withdraw your consent at any time by clicking the cookie preferences button (bottom right of the page). Withdrawal does not affect the lawfulness of processing carried out before withdrawal. On withdrawal, Google Analytics stops sending hits for the remainder of the session, the _ga and _ga_<id> cookies are cleared, and your stored decision is removed so the banner reappears on your next visit.

No other data collection

This Site has no backend, no user accounts, no contact forms, and no payment processing. We do not collect names, email addresses, or any other personal data directly. The only personal data processing activity is the analytics described above.

3. Data processors and international transfers

When you accept analytics cookies, data is processed by Google LLC (Google Analytics). Google acts as a data processor on our behalf under a Data Processing Agreement. Google may transfer data to and process it in the United States. Such transfers occur under the EU-U.S. Data Privacy Framework and Standard Contractual Clauses as appropriate safeguards. For more information, see Google's Privacy Policy (opens in new tab) and Google Analytics data safeguards (opens in new tab).

We do not sell, rent, or share your data with any other third parties.

4. Retention

Google Analytics retains event-level data for 14 months by default (the minimum available in GA4). Aggregated, non-identifiable reporting data may be retained longer within the Google Analytics interface.

Your cookie consent preference is stored in your browser's local storage for up to 6 months, after which you will be asked again.

5. Your rights under GDPR

As a data subject under GDPR, you have the following rights. To exercise any of them, contact us at offondev@gmail.com. We will respond within 30 days.

  • Right of access (Art. 15) - You may request a copy of the personal data we hold about you and information about how it is processed.
  • Right to rectification (Art. 16) - You may request correction of inaccurate personal data.
  • Right to erasure (Art. 17) - You may request deletion of your personal data (the "right to be forgotten"), where no other legal basis requires us to retain it.
  • Right to restriction (Art. 18) - You may request that we restrict processing of your data in certain circumstances.
  • Right to data portability (Art. 20) - You may request a machine-readable copy of the personal data you provided, where processing is based on consent and carried out by automated means.
  • Right to object (Art. 21) - You may object to processing at any time. For analytics, the easiest way is to decline or withdraw consent via the cookie banner.
  • Right to withdraw consent (Art. 7(3)) - You may withdraw consent at any time using the cookie preferences button (bottom right of the page). Withdrawal does not affect prior lawful processing.

6. Right to lodge a complaint

If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with a supervisory authority. In the EU, this is typically the data protection authority in your country of residence or the country where the alleged violation occurred. A list of EU supervisory authorities is available from the European Data Protection Board (opens in new tab). We do ask that you contact us first so we have an opportunity to address the issue directly.

7. Children's privacy

This Site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us and we will delete it promptly.

8. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Significant changes will be noted in the site's changelog or community forum. Continued use of the Site after changes constitutes acceptance of the updated policy.

9. Contact

For any questions or requests relating to this policy or your personal data, contact us at offondev@gmail.com or by reaching out to the board.