Privacy policy
Draft for review. This policy has not yet been checked and is not final. Points for the reviewer:
- The legal basis for analytics in each region (consent in the EEA, UK and Switzerland; on by default elsewhere).
- Whether Google Analytics' "cookieless pings" while consent is declined (see below) are acceptable as described.
- Transfers of data to Google and Cloudflare outside the visitor's country.
- The data retention period set in Google Analytics.
- Cookie names and lifetimes, against Google's current documentation.
- Whether fonts should be self-hosted so that pages make no requests to Google Fonts.
- The operator's name and contact details.
Last updated: [TO WRITE: date of the reviewed version]
Who we are
FlagsList (flagslist.com) is run by [TO WRITE: name of the person or business]. For any question about this policy or your data, contact [TO WRITE: email address].
What we collect
We use Google Analytics 4 to count visits and to see which pages people read. It does not ask for your name or email address, and we don't try to identify you. It records:
- the pages you view, how you arrived (for example from a search engine) and how long you stay;
- your approximate location (country and city), which Google works out from your IP address. Google says Google Analytics 4 does not log or store IP addresses;
- your device type, browser, operating system, screen size and language;
- when you click a download button: which flag and which file format.
We have turned off advertising features. We don't use Google Analytics for advertising or personalised ads, and we run no other tracking scripts.
Cookies
If analytics is on for your visit, Google Analytics sets two cookies:
_ga: tells visits apart. Lasts 2 years._ga_F7PM4WJE9T: keeps track of your current session. Lasts 2 years.
Your choice in our consent banner is saved in your browser's local storage (as fl-analytics-consent), not in a cookie, so we don't ask again on every page.
Your choice
If you visit from the European Economic Area, the United Kingdom or Switzerland, analytics cookies stay off until you accept them in the banner. Elsewhere, analytics is on by default and you can turn it off at any time.
While analytics is declined, Google Analytics sets no cookies. It may still send Google basic, cookie-free signals about page views, which Google uses to estimate visitor numbers without identifying anyone.
How to opt out
- Choose Cookie settings at the foot of any page, then Decline. You can change your mind the same way.
- Block or delete cookies in your browser's settings.
- Install Google's Google Analytics opt-out browser add-on, which stops Google Analytics on every site.
Other services that see your IP address
- Cloudflare hosts the site and handles every request. It processes your IP address to deliver pages and protect the site from attacks.
- Google Fonts supplies the typefaces, so your browser requests them from Google's servers.
How long we keep data
Google Analytics keeps the data for [TO WRITE: the retention period set in Google Analytics, for example 14 months], then deletes it.
Your rights
Depending on where you live, you may have the right to ask what data we hold about you, to have it corrected or deleted, or to object to its use. Because Google Analytics data is not linked to your name, we may not be able to find records that relate to you, but we will help where we can. Contact [TO WRITE: email address].
Changes
If we change this policy, we will update the date at the top of this page.