Privacy notice¶
Last updated 27 September 2026
This notice explains what personal data docs.sre-norns.com processes, why, for how long, and how you can control it. It covers this documentation site only. The main website at www.sre-norns.com, the product demos, and GitHub are separate services with their own notices.
In short¶
- The site has no accounts, forms, or advertising.
- Google Analytics runs only if you accept it. Until then, your browser makes no request to Google and no analytics cookies are set.
- The hosting provider processes technical request data, such as your IP address, to deliver pages.
- You can change your analytics choice at any time.
Who is responsible for your data¶
SRE Norns is run by Ivan Ryabov as an individual. I am the data controller for this website. For any privacy question or request, email norns@sre-norns.com.
Analytics runs only with your consent¶
When you first visit, a banner asks whether you allow analytics. If you accept, the site loads Google Analytics 4. I use it to learn which articles and documentation pages readers find useful, so I can decide what to write and build next.
This site and www.sre-norns.com store your choice separately. A choice on one site does not apply to the other.
Google Analytics is provided by Google Ireland Limited for visitors in the European Economic Area, the United Kingdom, and Switzerland, and by Google LLC elsewhere. Google processes the data on my behalf.
With your consent, Google Analytics collects:
- The pages you view, the page that referred you, and when.
- How long you stay and how far you engage with a page.
- The terms you enter in the site search.
- Your browser, operating system, device type, screen size, and language.
- Your approximate location (country and city), derived from your IP address. Google Analytics 4 does not log or store IP addresses.
- A random identifier stored in a cookie, which tells return visits apart from new ones.
Google signals, advertising features, and ad personalization are turned off. The data is not used to show you ads and is not combined with your Google account. I see aggregated reports; I cannot identify you by name from them.
Legal basis: your consent (Article 6(1)(a) of the GDPR and the UK GDPR). Storing analytics cookies on your device also requires your consent under the EU ePrivacy rules and the UK Privacy and Electronic Communications Regulations.
Retention: Google Analytics keeps event-level data for up to 14 months, then deletes it. The analytics cookies expire after two years unless you delete them or withdraw consent sooner.
International transfers: Google may process this data outside the EEA and the UK, including in the United States. Google LLC is certified under the EU–US Data Privacy Framework and its UK extension, and Google also uses standard contractual clauses.
Cookies and browser storage¶
| Name | Set by | Purpose | Duration |
|---|---|---|---|
_ga |
Google Analytics, only after you accept | Distinguishes one browser from another | 2 years |
_ga_<ID> |
Google Analytics, only after you accept | Keeps track of the current session | 2 years |
/.__consent |
This site, in local storage | Remembers whether you accepted or rejected analytics | Until you clear site data |
The consent record is strictly necessary to respect your choice, so it does not require consent. It contains only whether you allowed analytics and never leaves your browser.
The site also keeps technical preferences in your browser's local and session storage, such as the state of the search index and navigation. This data contains no personal information and never leaves your browser. The site search runs in your browser, and the site loads its fonts and scripts from its own domain.
You can change your choice at any time¶
Withdrawing consent is as easy as giving it. Open Cookie settings (also in the footer of every page) and select Reject. The site then stops Google Analytics and deletes its cookies. Withdrawing consent does not affect processing that happened before you withdrew it.
You can also block or delete cookies in your browser settings. The site works the same without them.
The hosting provider processes request data to deliver pages¶
Cloudflare, Inc. hosts this website. To deliver a page, Cloudflare necessarily processes your IP address, the requested URL, the time of the request, and browser headers such as the user agent. It uses this data to serve content and to protect the site against abuse.
Legal basis: my legitimate interest in delivering a working and secure website (Article 6(1)(f) of the GDPR and the UK GDPR). Cloudflare may process this data outside the EEA and the UK. Cloudflare is certified under the EU–US Data Privacy Framework. See the Cloudflare privacy policy for its retention periods.
Email is used only to reply¶
If you email me, I use your address and message to reply and to keep track of the conversation. I delete them when they are no longer needed for that purpose. Legal basis: my legitimate interest in answering messages sent to me (Article 6(1)(f)).
Links to other sites follow their own policies¶
The site links to GitHub, the main website, and the product demos. When you follow a link, the destination's privacy policy applies.
Your rights¶
Under the GDPR and the UK GDPR, you have the right to access, correct, or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise a right, email norns@sre-norns.com. I will reply within one month.
Analytics data is pseudonymous. I cannot look it up by your name or email address. To delete it at the source, reject analytics and clear the site's cookies; Google then cannot link future visits to past ones.
You also have the right to complain to a data protection authority, usually the one in the country where you live or work. In the United Kingdom, that is the Information Commissioner's Office.
No automated decisions and no sale of data¶
The site makes no automated decisions about you, does not profile you, and does not sell or share personal data for advertising.
Changes to this notice¶
If the site starts collecting different data, I will update this notice and the date at the top before the change takes effect.