Privacy policy & cookie notice

Overview of data processing

• No advertising or profiling cookies. We never run ad networks, cross-site trackers, or commercial monetization tools.
• Strictly necessary storage. Your theme choice and cookie consent choices are stored locally in your browser.
• Performance & analytics cookies (opt-in). We use Google Analytics 4 with Google Consent Mode v2 only after you grant consent.
• Global Privacy Control (GPC). We automatically detect and honor browser GPC and Do Not Track signals.
• Basic server logs. Our hosting infrastructure records technical diagnostic logs (such as IP address and requested route) to ensure platform security and uptime.

Google Analytics 4 & Google Consent Mode v2

ImpactOS uses Google Analytics 4 (Measurement ID: G-GLL9DC281J), a web analysis service provided by Google LLC (or Google Ireland Limited for users in the European Economic Area).

We configure analytics with Google Consent Mode v2 and the settings below. Technical settings alone do not establish legal compliance; this prototype notice remains subject to legal review.

• Consent-first: Analytics cookies and storage are set to denied by default. No analytics cookies are dropped until you click "Accept Analytics" or enable analytics in your cookie settings.
• IP addresses: Google states that Analytics does not log or store individual IP addresses. This does not make every analytics event anonymous.
• No Advertising Signals: Cross-device tracking (Google Signals), ad remarketing, and personalized advertising are permanently disabled.
• Restricted processing settings: We enable restricted-data-processing flags in the analytics configuration. These settings do not replace a review of actual data practices.
• Automatic PII Scrubbing: URLs, query strings, and custom event payloads are scrubbed client-side before transmission. Email addresses, authentication tokens, passwords, and sensitive keys are removed or masked.

Cookies and local storage used

Below is a complete index of storage mechanisms used across the platform:

• impactos_cookie_consent_v1 (localStorage): Strictly necessary. Records whether you have accepted or declined analytics cookies so you are not asked repeatedly. Does not track individual identity.
• gc-theme (localStorage): Strictly necessary. Remembers your display theme (Dark “Aurora” or Light “Blueprint”).
• _ga (HTTP cookie): Optional analytics. Google Analytics uses this cookie to distinguish browsers. Lifespan: up to 24 months.
• _ga_GLL9DC281J (HTTP cookie): Analytics (optional). Used by Google Analytics to maintain session state across page navigation. Lifespan: up to 24 months.

Your choice can change

You can allow or decline optional analytics, then change or withdraw that choice without penalty. Open the settings below or use “Cookie Settings” in the footer.

Open Cookie Settings

When you revoke analytics consent, the system immediately updates Google Consent Mode to denied and scrubs all analytics cookies from your browser.

Who we share data with

We do not sell, rent, or trade personal data. Data collected through Google Analytics is processed by Google on our behalf solely to provide aggregate statistical reporting on platform engagement.

Your rights under GDPR and CCPA/CPRA

Depending on your jurisdiction, you may have rights to access, rectify, restrict or erase personal data, request portability, or complain to a supervisory authority. This public prototype does not offer registered visitor accounts. Optional analytics may still use browser identifiers, and hosting logs may contain technical identifiers; we do not treat all visitor data as anonymous.

Changes to this policy

If our data practices or platform architecture change, we will update the "Last updated" date at the top of this document.