Legal
Privacy policy
We collect only what's needed to operate the site and understand which content is useful. GDPR / UK GDPR-compliant; you can opt out at any time.
Last updated: 18 May 2026.
What we collect
- Google Analytics 4 (GA4) — aggregated visit metrics: pageviews, sessions, referrer, approximate geographic region (country / city, derived from IP and discarded), browser + device type, screen size, and the path of pages you view. GA4 sets first-party cookies (
_gaand_ga_J5HT9GKYTN) that persist for up to 13 months. IP addresses are anonymised by Google before storage. The GA4 property ID isG-J5HT9GKYTN; the underlying data lives in our Google Workspace account. - Server logs — IP address, user-agent string, requested URL, HTTP status, response time. Retained 30 days for operational debugging. Not joined to GA4 data. Not used for tracking.
- Form submissions — when you submit a term proposal, contact form, or newsletter signup, we collect the data you provide. Retention varies by form (each form discloses its retention period).
- Working-group membership — name, email, affiliation, ORCID iD (optional). Retained for the duration of your WG participation plus 2 years for governance audit purposes.
- Cloudflare — the CASRAI site is fronted by Cloudflare for DNS, caching, and basic DDoS protection. Cloudflare logs request metadata per its privacy policy; we do not access individual Cloudflare logs.
What we don't collect
- Third-party advertising trackers (no AdSense, no Doubleclick, no Meta pixel)
- Social-media share-pixel tracking
- Cross-site behavioural profiles
- Sensitive personal data — we never ask for it and don't accept it via forms
- Children's data — the site is not directed at users under 13
Opting out of Google Analytics
You can opt out of GA4 measurement in three ways:
- Install the Google Analytics Opt-out Browser Add-on (works in Chrome, Firefox, Safari, Edge).
- Enable your browser's Do Not Track setting. We honour DNT for analytics in addition to required exclusions.
- Use any browser extension that blocks
googletagmanager.comor analytics cookies (e.g. uBlock Origin, Brave Shields, Privacy Badger).
Your rights (GDPR / UK GDPR / EEA)
You have the right to:
- Access — request a copy of any personal data we hold about you
- Rectify — correct inaccurate data
- Erase — request deletion of your data (subject to legal-retention exceptions)
- Port — receive your data in a portable format
- Restrict / object — restrict processing or object to specific uses
- Lodge a complaint with your national data-protection authority (in the UK: the ICO)
Email [email protected] to exercise any of these rights. We respond within 30 days (typically sooner).
Lawful basis (UK GDPR Article 6)
- Legitimate interests for analytics (understanding which content helps the research-administration community) — assessed against your privacy rights; opt-out available as above.
- Consent for newsletter subscription and form submissions you initiate.
- Contract / Legitimate interests for working-group membership records.
Data transfers
GA4 and Cloudflare are US-based services. Both rely on the EU-US Data Privacy Framework adequacy decision (effective 2023) for transfers from the EU/UK to the US. Server infrastructure runs in AWS us-east-1 (Virginia, USA).
Contact
Privacy questions, GDPR requests, DPO inquiries: [email protected]. For other contact channels see /contact.
