Privacy Policy
This page tells you what data we collect when you visit enfereal.com, why, and what you can do about it. We keep it short and plain — GDPR Art. 12 asks for "concise, transparent, intelligible" language, and we agree.
Who we are
Enfereal is the author and owner of this website. We are the data controller for enfereal.com.
Contact for any privacy question or data-subject request: enfereal@enfereal.com
What we collect
Only what Google Analytics and Google Tag Manager need to count visits and understand how the site is used. Specifically:
- The URL of each page you visit on enfereal.com.
- The referring URL (where you came from), if your browser sends one.
- Your IP address — used by Google Analytics 4 for approximate geolocation, then discarded (GA4 does not store IPs).
- Your browser, operating system, device type, and screen size — at the granularity Google Analytics uses.
- Approximate location (typically country or city level) — derived from your IP.
We do not intentionally collect any other personal data. There are no forms, no login, no comments, no newsletter sign-up.
Cookies
If you click Accept on the consent banner, Google Analytics sets these cookies on your device:
| Cookie | Purpose | Retention |
|---|---|---|
_ga | Identifies a unique device | 2 years |
_ga_<container-id> | Google Analytics 4 session state | 2 years |
_gid | Identifies a unique device (legacy) | 24 hours |
Google Tag Manager itself does not set cookies; it loads other tags that may.
If you click Decline — or never accept — no analytics cookies are set and no analytics data is recorded.
Lawful basis (GDPR)
- Analytics data: processed under your consent (GDPR Art. 6(1)(a)), captured via the consent banner.
- Security and abuse-prevention logs (e.g. rate-limiting, geographic filtering): processed under legitimate interest (GDPR Art. 6(1)(f)) — keeping the site available and protected.
Third parties
We use:
- Google Analytics and Google Tag Manager — for traffic analytics.
- Google Cloud Platform — for hosting and delivery.
- Google Fonts — for typography.
We do not use ad networks, retargeting pixels, Meta Pixel, or any tracking beyond Google Analytics. We do not sell personal data. Google's privacy policy: https://policies.google.com/privacy.
International transfers. Some of the third-party services above transfer data to or process it on servers in the United States. These transfers are covered by the EU-US Data Privacy Framework (DPF) and equivalent UK / Swiss extensions, under which Google is certified. For details on how Google handles data from sites using its services, see How Google uses information from sites or apps that use our services.
How long we keep your data
- Google Analytics: Google's default retention is 14 months. Aggregated and anonymised counters (visits per month, no PII) may be kept indefinitely.
- Security and access logs: 30 days.
Your rights
Under GDPR — and equivalent rights under UK and Ukrainian data-protection law — you have the right to:
- Access what we hold about you. Realistically: very little, since we operate no account system.
- Erasure ("right to be forgotten") — ask us to delete your data.
- Rectification — ask us to correct anything inaccurate.
- Portability — receive your data in a machine-readable format.
- Withdraw consent at any time — open the cookie settings from the "Cookie settings" link in the footer on any page.
- Lodge a complaint with your local data-protection authority.
To exercise any of these rights, email enfereal@enfereal.com.
Children
This site is not directed at children under 13, and we do not knowingly collect data from them.
Changes to this policy
We may update this policy. The "Last updated" date at the top reflects the most recent change. Material changes will be flagged on the homepage.
Ukrainian visitors — local-law note
For visitors in Ukraine, the rights described above apply equally under Закон України "Про захист персональних даних".