Privacy

Plain language. thinwrap.dev is a documentation site; it collects the minimum needed to keep the lights on.

Analytics

The site uses Google Analytics 4 with Consent Mode. Every storage knob — analytics and advertising alike — defaults todenied, and that default is pushed before the gtag.js loader is appended, so GA4 can never start in a granted state. Until you say otherwise it runs cookieless: no analytics or advertising cookies are written and only page-level counts are reported. We also enable ads-data redaction and disable URL passthrough so Google’s Conversion Linker does not drop its_gcl_au cookie while consent is denied.

Visitors in the EU and EEA are shown a consent banner. ChoosingDecline keeps the denied default. ChoosingAccept grants analytics and advertising storage, which permits GA4 to set cookies and to recognise a returning visitor across sessions — so accepting is a real change in what is collected, not a formality. Two limits hold either way, because they are set on the GA4 config rather than on consent: Google Signals is disabled, and ad-personalization signals are disabled. Accepting therefore enables measurement, not ad targeting.

Your choice is recorded in localStorage underthinwrap-consent; the banner itself sets no cookie. You can change it at any time with theCookie preferences link in the footer of every page, which reopens the banner. Withdrawing is exactly as easy as granting, and a withdrawal is pushed to GA4 immediately rather than waiting for the next page load.

Outside the EU/EEA the banner is not shown, the denied default stands, and the cookieless posture above applies for the whole visit. Nothing is granted without an explicit Accept, so there is no consent to withdraw — the footer link appears only once a choice has actually been recorded.

Third parties

  • Cloudflare serves the site and terminates TLS. Standard access logs (IP, user-agent, referrer) are retained on Cloudflare’s default schedule.
  • Cloudflare Web Analytics records page views. It sets no cookie, uses no client-side state, and does not fingerprint or track visitors between sites, so it runs for every visitor irrespective of the GA4 consent choice above. Measurements are sent to Cloudflare at cloudflareinsights.com.
  • GitHub hosts the source. The site links to repositories on github.com; GitHub’s own privacy notice applies once you follow a link.
  • No advertising networks. No marketing pixels. No fingerprinting.

Contact

Questions about this notice or about your data: dev@thinwrap.dev.