Privacy Policy
Last updated: June 2025
1. Who We Are
Greenmask is an open-source data anonymisation tool maintained by the Greenmask team. This policy explains what data we collect on greenmask.io and how we use it.
2. Data We Collect
Analytics (optional — with your consent)
If you accept cookies, we use Google Analytics 4 to collect anonymised usage statistics, including:
- Pages visited and time spent on each page
- Referring website or search engine
- Country-level location (derived from IP address; the full IP is not stored)
- Browser type and operating system
We use this data solely to understand how visitors use the site and to improve it. We do not sell this data to anyone.
Data you provide voluntarily
- Newsletter sign-up — if you subscribe via the footer form, we store your email address to send you product updates. You can unsubscribe at any time via the link in any email.
- Contact form — if you reach out via the contacts page, we receive your message and email address to reply to you.
3. Cookies
| Cookie | Purpose | Duration |
|---|---|---|
cookie_consent | Stores your cookie preference (accepted / declined) | 1 year (localStorage) |
_ga, _ga_* | Google Analytics — only set after consent | 2 years |
We do not use advertising cookies, tracking pixels, or any third-party marketing scripts.
4. Legal Basis (GDPR)
For visitors in the European Economic Area (EEA):
- Analytics cookies — processed on the basis of your explicit consent (Article 6(1)(a) GDPR). You can withdraw consent at any time by clearing your
cookie_consentkey from browser localStorage. - Newsletter — processed on the basis of consent given at sign-up.
- Contact enquiries — processed on the basis of our legitimate interest in responding to your message.
5. Data Retention
- Analytics data is retained by Google for 14 months (configured in our GA4 property).
- Newsletter email addresses are retained until you unsubscribe.
- Contact enquiries are retained for as long as needed to resolve the request.
6. Your Rights
Under GDPR you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Object to or restrict processing
- Withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal)
- Lodge a complaint with your national data protection authority
To exercise any of these rights, contact us at the address below.
7. Third-Party Services
We use the following third-party services:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Google Analytics 4 | Site analytics (consent-gated) | policies.google.com/privacy |
| GitHub Pages | Website hosting | docs.github.com/site-policy |
8. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the site after changes constitutes acceptance of the updated policy.
9. Contact
If you have any questions about this policy, please reach out via the contacts page.