← Back to tracker

Privacy Policy

So Noted. — sonoted.lol
Last updated: March 2, 2026

We track condemnations. We don't track you.

What We Collect

Your IP address is processed server-side to determine your approximate country using the MaxMind GeoLite2 geolocation database. This database runs locally on the server — no data is sent to MaxMind at request time. Your IP address is not stored in the database. Only the resolved country code and country name are recorded alongside aggregated condemnation counts.

A hashed session fingerprint is generated for rate-limiting purposes and stored in a log table. This hash is not reversible — it cannot be used to identify you. Rate-limiting records are automatically pruned after 30 days.

Aggregated, country-level condemnation counts are stored indefinitely. These are counters, not individual records tied to any person. They tell us that someone from a particular country condemned a particular conflict. They do not tell us who.

Analytics

If you accept the analytics cookie banner, we load two analytics services:

Google Analytics (GA4) — collects anonymous usage data such as page views, session duration, and general interaction patterns. Google may set its own cookies. Data is processed by Google under its own privacy policy. We use this to understand how visitors interact with the site.

Vercel Web Analytics — collects anonymous, aggregated page-view metrics. It does not use cookies and does not collect personal data. Data is processed by Vercel under its own privacy policy.

Neither service is loaded until you click “So noted” on the cookie banner. If you reject, no analytics scripts run and no analytics cookies are set. A cookie-consent cookie is stored locally to remember your choice for one year.

What We Don't Collect

No names, email addresses, or account information. No tracking pixels or third-party advertising. No IP addresses are stored in the database. No personal data is sold or shared with advertisers. Analytics are loaded only with your explicit consent.

Third-Party Services

Vercel provides hosting and web analytics for this site and is subject to its own privacy policy. Google Analytics processes anonymous usage data when consent is granted. Supabase provides the PostgreSQL database and stores only anonymous, aggregated counters. MaxMind GeoLite2 provides the geolocation database, which runs locally on the server — your data is not transmitted to MaxMind.

Your Data Rights

Since no personal data is stored, there is nothing to request, correct, or delete. The hashed fingerprint in the rate-limiting log is not reversible and is automatically pruned after 30 days. If GDPR or similar data protection regulations apply to you, note that country-level aggregated data is not considered personal data under GDPR, as it cannot be used to identify any individual.

Children's Privacy

This site does not knowingly collect any personal data from anyone, including children. There are no accounts, no forms, and no way to submit personal information.

Changes to This Policy

This privacy policy may be updated if the site's data practices change. Given that the current practice is to collect almost nothing, changes are unlikely to be dramatic. The last updated date at the top of this page will reflect any revisions.