Privacy Policy

This Privacy Policy explains how OGList (“we”, “us”, “our”), the operator of OGList, processes personal data when you visit this website. It in compliance with the EU General Data Protection Regulation (GDPR) (Regulation 2016/679).

1. Data Controller

The data controller responsible for your personal data is:

OGList Website: oglist.org Contact:

2. Data We Process, Purposes, and Legal Bases

We process personal data only where we have a lawful basis to do so under Article 6 GDPR.

2.1 Server Log Data

When you visit this site, our hosting infrastructure automatically records:

IP address
Browser type and version
Referring URL
Pages accessed and timestamps

Purpose: Ensuring the security, stability, and correct operation of the website. Legal basis: Legitimate interests (Art. 6(1)(f) GDPR) — maintaining a secure and functional public website. Retention: Log files are retained for a maximum of 30 days, after which they are automatically deleted.

2.2 Analytics (Google Analytics)

We use Google Analytics 4, operated by Google LLC, to understand how visitors interact with the site. Data collected includes pages visited, time spent, browser type, device type, and approximate geographic location (country/region level). IP addresses are anonymized before storage.

Purpose: Understanding site usage to improve content quality and user experience. Legal basis: Legitimate interests (Art. 6(1)(f) GDPR) — improving the quality and relevance of published content. You may object to this processing at any time (see Section 6). Retention: Google Analytics data is retained for 14 months, after which it is automatically deleted from Google’s systems.

Third-party processor: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google acts as a data processor on our behalf under a Data Processing Agreement. See Google’s Privacy Policy.

International transfer: Google Analytics data is transferred to and processed in the United States. This transfer is covered by Google LLC’s certification under the EU–US Data Privacy Framework (Decision 2023/1795), which provides an adequate level of data protection under Art. 45 GDPR.

2.3 Cookies

This site uses the following cookies:

Cookie	Provider	Purpose	Duration
`_ga`	Google Analytics	Distinguishes unique users	2 years
`_ga_*`	Google Analytics	Stores session state	2 years
`theme`	OGList	Stores light/dark mode preference	1 year (localStorage)

The theme preference is stored in browser localStorage, not a cookie, and contains no personal data.

Analytics cookies are set on the basis of legitimate interests. You may withdraw consent or object at any time by clearing cookies or using the opt-out method described in Section 6.

2.4 Contact by Email

If you contact us via email, we process your email address and the content of your message.

Purpose: Responding to your inquiry. Legal basis: Performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR), or legitimate interests (Art. 6(1)(f) GDPR) where no contract is involved. Retention: Email correspondence is retained for as long as necessary to address your inquiry and for a maximum of 2 years thereafter.

3. Data We Do Not Process

We do not create user accounts or store registration data.
We do not use your data for targeted advertising.
We do not sell or rent personal data to third parties.
We do not use automated decision-making or profiling as defined in Art. 22 GDPR.

4. Recipients of Personal Data

We share data only with:

Google LLC — as described in Section 2.2 (analytics processor).
Hosting/infrastructure providers — who process server log data on our behalf under data processing agreements.

We do not share personal data with any other third parties.

As a data subject under the GDPR, you have the following rights, which you may exercise free of charge by contacting us at :

Right of access (Art. 15): You may request confirmation of whether we process your personal data and, if so, a copy of that data.
Right to rectification (Art. 16): You may request correction of inaccurate or incomplete personal data.
Right to erasure (Art. 17): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent.
Right to restriction of processing (Art. 18): You may request that we restrict processing of your data in certain circumstances (e.g., while a dispute about accuracy is resolved).
Right to data portability (Art. 20): Where processing is based on consent or a contract and carried out by automated means, you may request your data in a structured, machine-readable format.
Right to object (Art. 21): You have the right to object at any time to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

We will respond to your request within 30 days. If we are unable to comply, we will explain why.

6. Opting Out of Analytics

You can prevent Google Analytics from collecting data about your visit by:

Installing the Google Analytics Opt-out Browser Add-on
Enabling Do Not Track in your browser (we honor this signal)
Clearing your browser cookies and localStorage

7. Right to Lodge a Complaint

If you believe we have processed your personal data in violation of the GDPR, you have the right to lodge a complaint with a data protection supervisory authority. You may contact the supervisory authority in your EU member state of habitual residence, place of work, or place of the alleged infringement. A list of EU supervisory authorities is available at edpb.europa.eu.

We would, however, appreciate the opportunity to address your concern directly before you contact a supervisory authority.

8. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction. Our site is served exclusively over HTTPS.

9. Changes to This Policy

We may update this policy to reflect changes in our practices or applicable law. Material changes will be indicated by updating the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

10. Contact

For any privacy-related questions or to exercise your rights, contact: