--- title: "Privacy Policy - perflocale.com Website - PerfLocale" description: "How the perflocale.com website handles visitor data. Static site, no tracking, Cloudflare Pages hosting, GDPR and CCPA compliant." canonical: "https://perflocale.com/privacy/" source: "https://perflocale.com/privacy/" format: "markdown" --- # Privacy Policy How this website handles visitor data. Short version: we collect nothing beyond what our hosting provider needs to serve the page. **Last updated:** 5 September 2026 **Effective date:** 23 April 2026 ## Scope This policy covers the `perflocale.com` website and its subdomains. It does **not** cover the PerfLocale WordPress plugin itself - if you're looking for information about what the plugin stores on your own WordPress site, see the [plugin privacy documentation](https://perflocale.com/docs/privacy/). Throughout this policy, "we", "us", and "our" refer to the operators of the PerfLocale website. "You" refers to any visitor. ## What we collect from visitors The website is a static site: the server only sends HTML, CSS, JavaScript, and images to your browser. We do **not**: - Run any analytics service that uses cookies, fingerprints visitors, or collects personal data — we use [Cloudflare Web Analytics](https://www.cloudflare.com/web-analytics/), which is cookieless, anonymizes IPs at the edge, and does not track visitors across sites - Use advertising networks or fingerprinting scripts - Operate contact forms, comments, newsletter sign-ups, or user accounts - Ship any cross-site or third-party tracking cookies - Sell, rent, or trade visitor data with anyone The documentation search box on the site (Pagefind) runs entirely in your browser - the text you type into it is never sent to our servers. ## Hosting, access logs, and Cloudflare cookies The website is hosted on **Cloudflare Pages** with Cloudflare acting as our edge network and content-delivery provider. Cloudflare, as our data processor, may: - Record standard HTTP access logs (IP address, timestamp, requested URL, user-agent, referring page) for the purpose of security, abuse prevention, and troubleshooting. These logs are retained by Cloudflare according to their own schedule; we do not download or keep additional copies. - Set a small number of **strictly-necessary cookies** for security and bot-detection. The two you'll typically see are: - `__cf_bm` - Cloudflare's bot-management cookie. Expires after 30 minutes. Used to tell humans apart from automated traffic. - `cf_clearance` - Issued when a visitor passes a security challenge (rare, only for suspected automated access). Expires after 30 days. We consider these cookies strictly necessary under GDPR Article 6(1)(f) – legitimate interest in securing the service – and they are not used for marketing, analytics, or profiling. If Cloudflare ever introduces new cookies or changes their purpose, we will update this page. For more on what Cloudflare does with the data it processes on our behalf, see [Cloudflare's privacy policy](https://www.cloudflare.com/privacypolicy/). ## When you email us If you email [contact@perflocale.com](mailto:contact@perflocale.com) - for privacy questions, general enquiries, or any of the contact points linked elsewhere on the site - we receive your email address, your name (if you include it), and the contents of your message. Responsible-disclosure reports go to [security@perflocale.com](mailto:security@perflocale.com) and are covered by the same handling described here. We use that information solely to reply, to coordinate if the message is about a security or bug report, and to credit you in a published advisory if you choose to be named. We don't add your address to any mailing list and we don't share it with third parties. Correspondence is kept for as long as it's relevant - typically no longer than three years - and then deleted. ## Third parties we rely on Cloudflare hosts the site and serves the Web Analytics script described above. Nothing else is loaded from a third party: - **No web fonts.** The site does not use Google Fonts or any other font service. It renders in the fonts your own device already provides. Its Content-Security-Policy allows fonts from this site alone, so no font request can leave your browser. - **No embedded media, maps, comment widgets or social buttons.** Every image and stylesheet is served from perflocale.com; the only script from another origin is Cloudflare's Web Analytics beacon described above. - **GitHub** - if you click through to our GitHub repository or issues page, you leave this site and GitHub's own privacy policy applies. Nothing is loaded from GitHub while you are here. Links to other sites (documentation of integrated plugins, Cloudflare's own documentation, Wordfence, HackerOne, etc.) take you outside our control and we are not responsible for their data practices. ## Your rights If you are in the European Economic Area (EEA), the United Kingdom, Switzerland, California, or any other jurisdiction with comparable data-protection law, you have the right to: - **Access** any personal data we hold about you - **Correct** information that is inaccurate - **Delete** it (within the limits of what we're legally required to retain) - **Restrict or object** to processing - **Data portability** - receive a copy in a common machine-readable format - **Withdraw consent** - where processing is based on consent (none of the processing described above is consent-based, but the right still applies if that changes) - **Complain** to a supervisory authority - in the EEA, your national data-protection authority; in the UK, the Information Commissioner's Office; in California, the California Privacy Protection Agency In practice, because we hold very little about most visitors (no account, no analytics profile), an access or deletion request is usually trivial: we have nothing stored beyond Cloudflare's access logs, and Cloudflare rotates those on its own schedule. To exercise any of these rights, email [contact@perflocale.com](mailto:contact@perflocale.com) with "Privacy request" in the subject line. We aim to respond within 30 days. ## Children The website is a developer-focused documentation and marketing site; it is not directed at children under 16. We do not knowingly collect information from anyone under 16. If you believe a child has contacted us, email [contact@perflocale.com](mailto:contact@perflocale.com) and we will delete the correspondence. ## Security The website is served over HTTPS with HSTS, has no write paths (no forms, no login, no API that accepts user input), and uses a strict Content-Security-Policy header. We publish a separate [security policy](https://perflocale.com/security/) covering the plugin itself with a responsible-disclosure contact. ## Retention at a glance | Data | Who holds it | For how long | | --- | --- | --- | | HTTP access logs (IP, URL, timestamp, user-agent) | Cloudflare | Per Cloudflare's schedule (typically ≤ 30 days at the edge) | | __cf_bm cookie | Cloudflare / your browser | 30 minutes | | cf_clearance cookie (rare) | Cloudflare / your browser | 30 days | | Emails you send us (general enquiries, security reports, privacy requests) | Us | Up to 3 years after the matter is resolved, then deleted | | Web Analytics page views (cookieless, no cross-site identifier) | Cloudflare | Per Cloudflare's Web Analytics retention | | Anything else (newsletters, accounts, advertising profiles) | Nobody | Not collected | ## International transfers Cloudflare routes traffic through its global network; access logs are processed at whichever Cloudflare data centre served your request. If you are in the EEA or UK and the processing happens outside that area, Cloudflare relies on its own Standard Contractual Clauses and the applicable adequacy decisions. See the [Cloudflare GDPR trust hub](https://www.cloudflare.com/trust-hub/gdpr/) for their current safeguards. ## Changes to this policy If we add analytics, a newsletter, a contact form, or any other feature that changes what this website processes, we will update this page and update the "Last updated" date at the top. Material changes will be flagged prominently for at least 30 days. Previous versions of this policy are available on request at contact@perflocale.com. ## Contact Questions about this policy or about how your data is handled on this website: Email: [contact@perflocale.com](mailto:contact@perflocale.com) (Use the subject line "Privacy request" for any right-of-access, deletion, or objection request.)