§ Legal

Privacy

Updated: 9 August 2026

In short: the site has no visitor accounts and collects no personal data you have not sent us yourself. The only thing running in the background is visit analytics, and it starts only after you agree to it.

Who processes the data

OKR UA GLOBAL, a Ukrainian non-governmental organisation, registration number 45738896, Kyiv, Ukraine. Questions about this policy go to team@okrua.com.

What we collect

Visit analytics through Google Analytics 4: which pages are opened, where visitors came from, which buttons are clicked, device type and approximate city. The IP address reaches Google anonymised — the last segment is dropped before storage. Ad personalisation is switched off.

Technical data the site needs to run: the IP address in hosting logs and in the rate limiter. The limiter keeps an address in memory for 15 minutes and writes it nowhere.

If you email us or submit the request form, we receive what you put in it. The form lives in Google Forms and is governed by the Google privacy policy.

What we do not collect

We do not sell data, pass it to ad networks or show advertising. There is no Facebook pixel, no support chat and no third-party widgets. There are no visitor accounts either: only the site editors have logins.

Cookies

Cookies are small records a site leaves in your browser. okrua.com uses three kinds:

NEXT_LOCALERemembers the language you choserequired to run, no consent needed
_ga, _ga_*Google Analytics: tells a returning visit from a new oneonly after consent
sb-*Admin sessionsite editors only

Consent and how to withdraw it

Until you answer the cookie prompt, analytics runs in denied mode: Google Analytics is loaded but writes no cookies and does not link your actions across pages.

Your choice is stored in your browser, in localStorage under the key okrua_consent. To change it, clear the site data in your browser settings and the prompt will appear again.

Who the data goes to

Google (Google Analytics, Google Forms) — analytics and the request form. Vercel — hosting and request logs. Supabase — the content database. All three process the data as our processors, under their own privacy policies. Data may be stored on servers outside Ukraine, including in the EU and the United States.

How long we keep it

Analytics — 14 months, which is the Google Analytics setting. Hosting logs — for the Vercel retention period. Email correspondence — for as long as it is needed to handle your request.

Your rights

You may ask what data of yours we hold, request correction or deletion, withdraw consent to analytics, and complain to the Ukrainian Parliament Commissioner for Human Rights. Write to team@okrua.com — we reply within 30 days.

Changes to this policy

If we change what we collect or which processors we use, we will update this page and the date at the top. Material changes will be announced on the homepage.

Privacy policy — OKR UA