Privacy & Cookies

Scope and contact

Grainpeak LLC, registered in Wyoming, United States, operates grainpeak.com. This policy covers this website, its preferences and email inquiries. It does not cover a future robot product or other websites, including IsAnythingDown and GitHub, which have their own policies.

For privacy questions or requests, email contact@grainpeak.com. Last substantive update: October 23, 2026 (America/New_York).

Cookies and your choices

Language memory and Google Analytics are separate optional purposes, both off by default. You can reject optional cookies, accept available options or choose each purpose separately. Closing settings or continuing to browse does not give consent. Use Cookie settings in the footer or on this page to change or withdraw consent at any time. Google Analytics runs only when configured and enabled on this site and you consent; Cookie settings shows its current availability. The separate server-side Cloudflare request statistics described below do not use cookies and are not controlled by these optional choices.

Cookie	Purpose	Provider	Category	Retention	Stored data
grainpeak_cookie_choice	Remember your decision and avoid repeatedly asking	Grainpeak LLC	Necessary	Up to 180 days	Format and policy versions, language and analytics permissions, decision and expiry times; no visitor ID
grainpeak_language	Apply a language you ask us to remember	Grainpeak LLC	Optional preference	Up to 180 days	v1: and a supported language code; no user ID
_ga	Distinguish browser visits and recognize a returning browser	Google	Optional analytics	Up to 180 days; only when enabled and consented	Random Client ID; pseudonymous browser identifier
_ga_<stream>	Maintain Analytics session state for the configured stream	Google	Optional analytics	Up to 180 days; only when enabled and consented	Session identifiers and state; pseudonymous data

Ordinary visits do not renew these cookie periods. Actively saving a new decision starts a new choice period; enabling language memory or switching languages while enabled can restart the language period. Analytics cookies are configured for 180 days with cookie_update=false, so ordinary visits do not extend their expiry. Rejecting all optional purposes or withdrawing consent disables language memory and Google Analytics; when the browser permits, we delete the language cookie and try to remove _ga and _ga_ cookies for this site. A necessary rejection record remains to avoid repeated prompts. Old optional cookies do not give consent.

If your browser blocks storing or deleting cookies, your new choice applies to the current page only and an earlier saved choice may remain. Remove this site’s cookies in your browser to clear it. Without JavaScript, Google Analytics does not load and this site creates no optional cookies. Existing cookies can be removed in your browser; static language links and this policy remain available.

Language and tracking

The default homepage can match a supported language to your browser’s language preferences without saving an optional cookie. Direct language URLs retain their language. Only your active choice enables language memory.

We do not enable advertising, Google signals or user-provided data collection, and do not sell personal information or share it for cross-context behavioral advertising. We recognize Global Privacy Control (GPC) and honor its sale/sharing opt-out signal. It does not grant Google Analytics consent. Language memory and Google Analytics each require your choice. Available rights depend on applicable law.

Google Analytics and browser identifiers

Google Analytics runs only when configured and enabled on this site and you consent. Its current availability is shown in Cookie settings. We use Google Analytics to understand visits and returning browsers. A random Client ID can link visits from the same browser; it does not reliably identify a natural person and is pseudonymous personal data, not fully anonymous data. We do not send your name, email address or a user_id, and do not enable Google signals, advertising features or user-provided data collection.

We use Basic Consent Mode: on initial page load without consent, with rejection as the initial choice, or with analytics unconfigured, we do not download Google Analytics or send Google analytics requests, including cookieless analytics pings. After consent, Google receives visit events and browser or device information associated with the random identifier. It may process data in the United States and other countries. See Google’s privacy policy and how Google uses information from partner sites. Google’s processing is not described as fully anonymous.

With your analytics consent, the page-view events we send can include approved UTM campaign labels for source, medium, campaign name and ID, a public keyword label, and a promotional link or placement. We pass these as Google campaign parameters; the page address excludes query parameters and fragments, and the referring address is limited to its origin. We do not add cookies or browser storage to retain these labels or carry them across page requests. Google Analytics can still associate consented events through its existing identifiers and attribution.

Cookie expiry and retention in the Google Analytics property are different. Event-level and user-level data retention are both configured to 2 months, and new activity does not reset the user-level retention period. This is separate from the 180-day cookie lifetime and does not affect standard aggregated reports. Google applies retention-period changes after a 24-hour waiting period and processes deletion of expired data monthly. This does not mean that all data held by Google is deleted after 2 months.

Withdrawing Google Analytics consent stops subsequent Google Analytics collection on this site and we try to remove its Analytics cookies. If saving the withdrawal succeeds, we reload the page to end the loaded analytics runtime. If saving fails, analytics is disabled only on this page; clear old site cookies before manually reloading. Requests already sent or in flight cannot be undone. It does not automatically erase events already sent to Google. You can email us to request deletion under applicable law. We will assess whether the relevant records can be located using available identifiers and Google’s tools; we cannot promise to locate or delete every historical event when no usable identifier remains.

Website delivery and Cloudflare

The website is hosted on Cloudflare Workers with Workers Static Assets. A private Cloudflare R2 bucket retains historical copies of public website CSS and JavaScript files for delivery. We do not enable Worker application request logs. Cloudflare may still process IP addresses, request paths, browser or device information and security events to deliver, operate and protect its services. Application logging being off does not turn off all provider network or security records.

Provider request and security retention depends on the actual service settings, terms and legal requirements. Cloudflare may process information in the United States and other countries. Its privacy policy and Data Processing Addendum explain its processing and transfer arrangements. Contact us for questions about international processing and the safeguards applicable to it.

Cloudflare request statistics

We use Cloudflare Workers Analytics Engine to understand requests to public pages and files such as robots.txt and sitemaps, referral sources and automated access. For eligible production requests, we record the time, website hostname, a public page path or a fixed error label, HTTP status, country, referring hostname, approved campaign labels, and a coarse browser or automated-agent category. These statistics help us understand website use and operation.

We collect only allowlisted public campaign labels: utm_source (source), utm_medium (medium), utm_campaign (campaign name), utm_id (campaign ID), utm_term (public keyword label), and utm_content (promotional link or placement). These distinguish channels, campaigns and individual promotional links. Unknown or invalid values and repeated parameters are discarded. Campaign labels must not contain names, email addresses or identifiers for individual people. We add no cookies, browser storage or cross-request campaign attribution for this collection.

We do not store IP addresses, full referring URLs, query parameters other than these approved campaign labels, complete User-Agent strings, cookies or visitor identifiers in this dataset, and do not use it to link visits across websites or recognize returning people. These are request counts, not verified counts of people or returning visitors; browser and bot categories are inferred from request headers and are not proof of identity. Analytics Engine retains records for three months, separately from Google Analytics’ two-month setting.

This server-side collection does not load a browser script, read or write cookies, or depend on Google Analytics consent. We skip it when a request carries Global Privacy Control (Sec-GPC: 1) or Do Not Track (DNT: 1). You may enable these request signals in a compatible browser or email us to object or ask about this processing. Where applicable law permits, we rely on legitimate interests in understanding referral sources, automated access and website operation, subject to your rights and the applicable limits. These safeguards do not make all request data fully anonymous or stop Cloudflare’s separate delivery and security processing.

Email inquiries and processing purposes

If you email us, we receive the address, message and attachments you provide and use them to respond and handle the inquiry. Do not send identity documents, bank details or passwords unless genuinely needed. We retain correspondence only as needed for the inquiry, related follow-up and applicable legal or record-keeping requirements. Deletion requests are assessed against these needs and applicable law.

Where data protection law requires a lawful basis, necessary website operation and security and responding to inquiries may rely on legitimate interests, with applicable limits. Optional language memory and Google Analytics rely on your separate consent. Processing required by law relies on the relevant legal obligation.

Your rights and changes

Depending on applicable law, you may request access, correction, deletion, restriction, objection or portability, and withdraw consent. Where EU or UK data protection law applies, you may also complain to the relevant supervisory authority. California and other residents may exercise rights available under the laws that apply to them. Contact the address above; we will assess verification, legal exceptions and any necessary retention. Withdrawal does not affect processing lawfully carried out beforehand.

We will update this policy when actual processing changes. New accounts, forms, payments, analytics or third-party embeds require a fresh review and accurate disclosure before use.