1. Short version
We do not directly collect personally identifiable information (PII) except when you explicitly provide it (e.g., your email when subscribing to our newsletter).
We use Google Analytics 4 to understand aggregate traffic patterns. GA4 sets cookies and processes a hashed form of your IP address.
We do not sell your data. We do not run behavioral advertising. We do not share data with third parties beyond what is described below.
2. What we collect
Server logs: when you load a page, our hosting provider logs the request URL, your IP address, your browser user agent, and the referring URL. These logs are retained for up to 30 days for operational and security purposes.
Analytics: through Google Analytics 4, we collect aggregated information about page views, session duration, geographic region (country/region only — not precise location), device type, browser, and referral source.
Newsletter (optional): if you subscribe to our newsletter, we collect the email address you provide. We use it only to send the newsletter and operational confirmations. You can unsubscribe at any time using the link at the bottom of every newsletter email.
3. Cookies
Google Analytics 4 sets two first-party cookies (`_ga` and `_ga_*`) used to distinguish unique visitors and sessions. These cookies expire after up to 2 years.
No advertising cookies. No cross-site tracking pixels. No third-party social-media trackers.
You can disable analytics cookies via your browser settings, an ad-blocker (e.g., uBlock Origin), or by visiting the Google Analytics opt-out browser add-on at https://tools.google.com/dlpage/gaoptout.
4. How we use the data
Operational: keeping the site online, debugging errors, and detecting abuse.
Editorial: deciding which topics need more coverage based on aggregate page-view trends. We do not personalize content based on individual visitors.
We do not use the data for advertising, behavioral profiling, or sale to third parties.
5. Third parties
Google LLC — Google Analytics 4. Data is processed under Google's standard contractual clauses; details at https://policies.google.com/privacy.
Hosting provider (Vercel or Cloudflare) — server-side request logging. Data is processed in the U.S. and Europe under their respective data-processing agreements.
Newsletter delivery (provider TBD; will be disclosed here when configured).
6. Your rights
Depending on where you live, you may have the right to access, correct, or delete personal data we hold about you, and to object to or restrict certain processing. To exercise these rights, email editorial@ufofiles.wiki. Verifiable requests are honored within 30 days.
Residents of California (CCPA/CPRA) and the European Economic Area (GDPR) have additional rights including the right to know, the right to delete, and the right to opt out of sale. We do not sell your data.
7. Children
The site is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us and we will delete it.
8. Changes to this policy
We will update this policy when our practices change. Material changes will be reflected by an updated "Last updated" date at the top of this page.
9. Contact
Privacy questions or data requests: editorial@ufofiles.wiki.