Skip to content
Cyoda Documentation
Settings

Privacy Notice

This Privacy Notice explains how Cyoda collects and uses personal data when you visit our public documentation website (the "Site"). It applies to visitors in the United Kingdom and the European Economic Area and is written to meet the requirements of UK GDPR, EU GDPR and the ePrivacy rules on cookies and similar technologies.

We operate a static site hosted on GitHub Pages and we use Google Analytics to understand how the Site is used. We do not use advertising cookies and we do not sell personal data.

Who we are (Data Controller)

  • Controller: Cyoda
  • Contact: privacy@cyoda.com
  • Postal contact available on request. If you are in the EEA/UK you may contact your local authority or the UK Information Commissioner's Office (ICO) using the details under "Your Rights".

Personal data we process

We only process limited personal data necessary to operate the Site:

  • Technical and usage data: IP address (truncated/anonymised), device and browser information, pages viewed, referrer, timestamps, and events such as clicks and scroll depth. This is collected via Google Analytics and server logs from our hosting provider (GitHub Pages).
  • Communications: If you contact us (for example by email), we process the personal data you provide so we can respond.

We do not create user accounts on this Site and we do not knowingly collect special category data.

Why we process your data (purposes and lawful bases)

  • Provide and secure the Site (including basic logging and security monitoring)
    • Lawful basis: legitimate interests (running a secure, reliable website)
  • Measure and improve Site performance using analytics (Google Analytics)
    • Lawful basis: your consent (only set after you agree via the cookie banner)
  • Respond to enquiries
    • Lawful basis: legitimate interests (responding to messages we receive) or contract (where applicable)
  • Comply with law and enforce our rights
    • Lawful basis: legal obligation and legitimate interests

Cookies and similar technologies

We use essential cookies that are necessary for the Site to function and, with your consent, analytics cookies from Google. For details of each cookie, retention periods and how to manage your choices, see our Cookie Policy.

Analytics cookies are not set until you provide consent. You can withdraw your consent at any time as described in the Cookie Policy.

Google Analytics

We use Google Analytics (GA4) to understand aggregate Site usage. We have configured GA to enhance privacy:

  • IP anonymisation/truncation enabled
  • No advertising features and no remarketing
  • Data sharing with other Google products disabled where possible

Provider: Google Ireland Limited. Analytics data may be transferred to Google LLC in the United States. We rely on Standard Contractual Clauses approved by the European Commission/UK for such transfers. For more information, see Google's privacy documentation and terms.

Hosting and processors

  • Hosting: GitHub Pages (GitHub, Inc.). Basic server logs may include IP address, date/time, requested resource and user‑agent. These logs are used for security and operational purposes and are retained by the provider per their policies.
  • Analytics: Google Analytics (see above).

We have appropriate contracts in place with our service providers to process data on our behalf.

Data retention

  • Analytics data: retained by Google Analytics for up to 14 months (or a shorter period if configured) and then deleted or aggregated.
  • Server logs: retained by our hosting provider per their operational needs.
  • Communications: retained as long as needed to respond and for a reasonable period thereafter.

International data transfers

Where data is transferred outside the UK/EEA (for example to the United States), we rely on appropriate safeguards such as the EU/UK Standard Contractual Clauses and additional measures where necessary.

Your rights (UK/EU)

Subject to conditions and exceptions under applicable law, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data
  • Restrict processing
  • Object to processing based on legitimate interests
  • Data portability (where applicable)
  • Withdraw consent at any time (this will not affect processing that has already occurred)
  • Lodge a complaint with a supervisory authority

Supervisory authorities include the UK Information Commissioner's Office (ico.org.uk) and your local EU data protection authority.

Children

This Site is not directed to children and we do not knowingly collect data from children.

Security

We take appropriate technical and organisational measures to protect personal data. However, no internet transmission is completely secure.

Changes to this notice

We may update this Privacy Notice from time to time. We will change the "Last updated" date below and, where appropriate, provide more prominent notice.

Last updated: September 2025