Privacy policy

Your current choice

Analytics only runs if you say yes, and you can change your mind at any time, declining is exactly as easy as accepting.

What runs, and why

None of the below loads until you accept above (or accept the banner shown on your first visit). If you decline, none of it loads at all.

• Google Analytics 4, page views, referring site, approximate device/browser type and general (city-level or coarser) location derived from IP address. Used to see which tools and guides are actually useful, so the weakest pages can be found and improved. Processed by Google under its own privacy policy and retained under a schedule covered in “How long data is kept” below.
• Vercel Analytics, aggregated page-view counts, by design without cookies or persistent identifiers. Used the same way as GA4: to see what’s working. Processed by Vercel under its own privacy policy.
• Vercel Speed Insights – Core Web Vitals and load-performance measurements from your browser, also cookieless. Used to keep the site fast. Also processed by Vercel under the policy linked above.

None of this is shared with advertisers, sold, or used to build a cross-site advertising profile. There is no ad tech and no remarketing on this site.

Where your data is processed

If you accept analytics, the data above reaches Google and Vercel, both of which process it outside the European Economic Area (including in the United States). That is an international transfer under GDPR, and each company states the safeguard it relies on for it:

• Google states it is certified under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks, and relies on the European Commission’s Standard Contractual Clauses for transfers not covered by an adequacy decision or the frameworks above. See Google’s own data transfer frameworks disclosure.
• Vercel states it relies on the European Commission’s 2021 Standard Contractual Clauses. See Vercel’s own Data Processing Addendum.

We are relaying what each processor states about its own transfer mechanism, not certifying it ourselves. Their current terms govern the arrangement in full.

How long data is kept

GA4’s user and event data retention period is set in this property’s Data Settings, under Google’s Admin API, which this site does not currently have access to read programmatically. Rather than state a duration we have not confirmed, we say plainly: this property has not been changed from Google’s default retention setting, and Google’s own page linked there is the current source of truth for what that default is. Vercel Analytics and Speed Insights are aggregate and cookieless by design and are not tied to an individual retention window the way GA4’s per-user data is.

Withdrawing consent

Use the control above at any time, it takes effect immediately and is remembered on this device. Declining stops all future collection; it can’t retroactively delete data already sent to Google or Vercel for a prior visit. To manage or delete that directly, Google provides its own controls, including the Google Analytics opt-out browser add-on.

Your rights

If you are in the EEA, the UK, or another jurisdiction with similar protections, you have the right to: access the data held about you, have it corrected, have it erased, restrict or object to its processing, receive a copy of it in a portable format, and withdraw consent at any time (see the control above). You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the place where you believe an infringement occurred.

In practice, most of this is already in your hands without contacting anyone: the tools on this site process nothing on a server, so there is no account data and no server-side record of what you typed into a calculator to access, correct or erase. The only data a request could concern is the analytics events described above, and Google’s own account controls linked in “Withdrawing consent” let you view and delete those directly. For anything those controls do not cover, use the contact route below once it is live.

Contact

actfap is an independently run, non-commercial project. A dedicated, non-identifying privacy contact channel is planned but was not live as of this review, so we are not publishing an address here that would not reach anyone. Check back here for an update. In the meantime, the fastest way to stop analytics entirely is the control above, and Google’s own controls above let you manage or delete analytics data directly.