--- title: Privacy policy — m7kni.io description: This documentation site has no accounts, no forms and no database. What it measures, and how to turn that off. hide: - navigation - toc --- # Privacy policy Last updated 11 August 2026. m7kni.io is the documentation hub for the open-source tooling M7KNI Ltd publishes. It is a set of static pages. **There is no account, no login, no form and no database anywhere on this site**, so apart from the analytics described below there is nothing for us to collect and nothing for this policy to hide. ## Who is responsible **M7KNI Ltd** is the data controller. We are registered in England and Wales, company number **17385187**, at Unit 13 Freeland Park, Wareham Road, Lytchett Matravers, Poole, England, BH16 6FA. Reach us through the [contact form on m7kni.com](https://m7kni.com/#contact). That is the only route in; we do not publish a mailbox, because a published address collects spam faster than it collects questions. We are not required to appoint a Data Protection Officer and have not appointed one — the contact form reaches the people who would answer to one. Messages sent through it are covered by the [m7kni.com privacy policy](https://m7kni.com/privacy/). The software documented here is separate. It runs on **your** infrastructure, it does not report to us, and nothing it collects passes through this site. If a project has its own privacy considerations, they are in that project's own documentation. ## Analytics and cookies This site uses **Google Analytics 4** to count visits and see which pages get read — which, on a documentation site, is mostly how we work out what to write more of. It is loaded through Cloudflare Zaraz, and it does not run until you have agreed to it. The first time you arrive you are asked; if you decline, the tag is never loaded, and every page works exactly the same. What is stored in your browser, and why: - **Your consent choice**, in a cookie named `cf_consent`. This one is set whatever you choose, because refusing analytics is itself a decision we have to remember — without it you would be asked again on every page. - **An analytics identifier**, but only if you agreed. It is a random value that lets Google count two visits by you as one visitor rather than two. - **A Cloudflare cookie** that distinguishes real visitors from automated traffic. This is part of serving the site securely and is set regardless of your analytics choice. If you agree to analytics, this is what is sent to Google about the visit: - **Which page you are on** — the full address, including any campaign tags — and **the page you arrived from**, including when that is somebody else's site. - **Your device and browser**, in broad terms — whether you are on a phone or a computer, which browser and operating system, your screen and window size, the language your browser asks for, and your time zone. The identifying detail is deliberately stripped on the way out: no device make or model, no exact browser or operating-system version, and no list of what is installed. - **Roughly where you are**, worked out from your IP address. The address is **trimmed before it reaches Google**, so this is a general area rather than your connection. - **The random visitor ID** above, so two visits by you count as one visitor. **None of Google's advertising features are switched on.** Google Signals, remarketing and ads personalisation are all off on the analytics property, so a visit here is never associated with your Google account and is never used to build an advertising profile of you. There are no advertising cookies and no tracking pixels. The fonts are served from this site rather than a font provider, so loading a page does not tell anyone else that you visited. ## Who else handles it The site runs entirely on **Cloudflare**, which acts as our processor and hosts the pages. **Google** receives website analytics data, and only if you agreed to it. Google is a separate controller for that data and handles it under its own terms. Both are bound by contract to protect your data to at least the standard set out in this policy and required by UK data protection law. Nobody else has access. We do not sell, share or rent personal data. ## Where it goes Analytics data, if you agreed to it, is transferred to Google in the **United States**. That transfer relies on the UK International Data Transfer Addendum to the European Commission's standard contractual clauses. Declining analytics means no transfer happens. ## How long we keep it - **Analytics:** Google keeps event data for **2 months** and user-level data for **14 months**, after which it is deleted. - **Your consent choice:** stored in your browser until you clear it or it expires. There is nothing else, because nothing else is collected. ## Your rights Over any personal data we hold about you, you have the right to be told what we hold and get a copy of it, to have it corrected or deleted, to restrict or object to what we are doing with it, and to receive it in a portable form. You can **withdraw your consent** to analytics at any time using the Manage cookies button above. In practice, declining analytics leaves us holding nothing about you at all. For anything else, use the [contact form on m7kni.com](https://m7kni.com/#contact). We will respond within one month and we do not charge for it. ## Decisions, and what you have to give us We do not make automated decisions about you and we do not profile you. Nothing here is required by law or by a contract: agreeing to analytics is entirely optional and refusing it costs you nothing. ## Changes to this policy If we change what we do with personal data, we will update this page and move the date at the top. ## Complaining If you think we have handled your data badly, you can complain to the [Information Commissioner's Office](https://ico.org.uk/make-a-complaint/), the UK's data protection regulator. We would rather you told us first, but you do not have to.