Privacy policy

What orieljs.vercel.app collects when you visit, why, who else handles it, how long it is kept, and the choices and rights you have.

Last updated: 21 October 2026. This policy covers this website only. The Oriel framework you install from npm collects nothing about you or your users.

Who we are#

This website is run by the OrielJs Project, based in India. The OrielJs Project decides why and how the personal data described here is used, which makes it the data controller (under the EU and UK GDPR) and the data fiduciary (under India's Digital Personal Data Protection Act, 2023).

You can reach us about anything in this policy at orieljs.team@gmail.com.

The short version#

There are no accounts, no forms and no ads on this site, and we never sell or rent your data.
We measure how the site is used with Google Analytics, through Google Tag Manager, so we can see which pages help, what people search for, and what is missing.
The first time you visit, a banner asks whether you accept analytics cookies. You can change your answer at any time with the Cookie settings link at the foot of every page.
In the European Economic Area, the United Kingdom and Switzerland, Google Analytics sets no cookies unless you accept. Elsewhere, analytics runs from your first page until you decline.
The docs search runs entirely in your browser. What you type only leaves your device as part of analytics, if analytics is on.

What we collect#

When you load any page#

The site is hosted by Vercel. Like every web server, Vercel's servers receive the technical details of each request so they can send you the page: your IP address, the address of the page, the date and time, your browser's user agent (browser, version and operating system), and the page that linked to it (the referrer). Vercel uses this to deliver the site, keep it secure and fix faults, and keeps it briefly as operational logs. We don't use these logs to identify anyone.

When your browser downloads Google Tag Manager's script, Google receives the same kind of technical details, as any server you connect to does. Tag Manager itself sets no cookies; it loads Google Analytics, described below.

When analytics is on#

Google Analytics records how the site is used. The site sends it:

each page you view: its address and title, and for the docs, the section and the Oriel version the page documents;
your docs searches: the words you searched for, how many results there were, and the page you opened from them;
presses of a Copy button: which code window (its file name or language) or which install command was copied;
the framework you pick in a set of code tabs, such as React or Vue.

Google Analytics also collects, on its own:

your approximate location (country, region and city), worked out from your IP address;
your device type, browser, operating system, screen size and language;
the site that sent you here, how long your visit lasts, how far you scroll, links you follow to other sites, and files you download.

Google Analytics 4 uses your IP address only to work out your approximate location, then discards it: IP addresses are not logged or stored in Analytics. Analytics gives you a random identifier, kept in a cookie (below), so that it can tell one visit from another and count returning visitors. We see the results as totals and trends. We have no way to link them to your name or email address, and we don't try.

This site uses no advertising features: Google signals is off, consent mode keeps ad storage, ad user data and ad personalisation off for every visitor, and the optional data sharing with Google (benchmarking, technical support, recommendations, and Google's own products and services) is not enabled.

Please don't type personal information, such as your name or email address, into the docs search.

When analytics is off#

If you decline, or if you are in the EEA, the UK or Switzerland and haven't accepted, Google Analytics sets no cookies and receives no identifier for you. Google's tags may still send Google basic signals without cookies or identifiers, such as that a page was viewed, from which Google estimates totals. This is how Google's "consent mode" works.

When you email us#

If you write to us, we receive your email address and whatever you choose to tell us, and use it only to reply.

What stays on your device#

The site keeps two small items in your browser's local storage. They never leave your device:

oriel-consent: your answer to the cookie banner and when you gave it;
oriel-docs-tab: the framework you last picked in a set of code tabs, so every page shows that one.

Cookies and local storage#

Name	Kind	Set by	What it is for	How long it lasts
`_ga`	Cookie	Google Analytics	A random identifier that tells visits apart	2 years
`_ga_GYXHHGPWTT`	Cookie	Google Analytics	Keeps track of the current visit	2 years
`oriel-consent`	Local storage	This site	Your answer to the cookie banner	12 months, then you are asked again
`oriel-docs-tab`	Local storage	This site	The framework you picked in code tabs	Until you clear your browser's data

The two Google Analytics cookies are only set when analytics is on. The site sets no other cookies, and no advertising, social media or cross-site tracking cookies.

Your choices#

The cookie banner. Accept turns analytics on. Decline turns it off and deletes the Google Analytics cookies already in your browser. Your answer is remembered for 12 months.
Change your mind at any time. The Cookie settings link at the foot of the home page and of every docs page opens the banner again.
Your browser. You can block or delete cookies in your browser's settings, or install Google's Analytics opt-out add-on.

Declining analytics changes nothing else: every page, the search and the docs work the same.

Why we use your data#

Analytics. Where the law requires consent before analytics cookies are used, including in the EEA, the UK and Switzerland, we use Google Analytics only with your consent (article 6(1)(a) of the GDPR and of the UK GDPR). Elsewhere, we rely on our legitimate interest in understanding how the documentation is used so that we can improve it, and you can object at any time by declining. Under India's Digital Personal Data Protection Act, analytics runs on your consent, which you can withdraw as easily as you gave it.
Hosting logs. Delivering the site and keeping it secure is in our legitimate interest, and in yours as a reader (article 6(1)(f) of the GDPR and of the UK GDPR).
Emails. Replying to you is in our legitimate interest, or a step you asked us to take.

Who receives your data#

Vercel Inc., which hosts the site, processes the request details described above for us. See Vercel's privacy policy.
Google LLC, which provides Tag Manager and Analytics, processes analytics data for us under the Google Ads Data Processing Terms we accepted. See how Google uses information from sites that use its services and Google's privacy policy.
Authorities, only if the law requires us to disclose information.

We don't sell, rent or trade personal data, and we don't share it with anyone else.

International transfers#

Vercel and Google process data in the United States and in other countries. When data from the EEA, the UK or Switzerland is transferred to a country without an adequacy decision, the transfer relies on the EU–U.S. Data Privacy Framework and its UK and Swiss extensions, where the provider is certified, or on the European Commission's standard contractual clauses and their UK and Swiss equivalents.

How long we keep it#

Analytics. Google Analytics keeps the detail of each visit for 2 months, then deletes it. Reports made of totals, such as the number of views of a page in a month, are kept, and they can't identify anyone. The _ga cookies expire after 2 years unless you delete them first.
Hosting logs. Vercel keeps them only as long as it needs to run and secure its service.
Emails. Until your question is settled, and no longer than 2 years.

Your rights#

In the EEA and the UK, under the GDPR and the UK GDPR, you have the right to:

ask for a copy of the personal data we hold about you, and how we use it;
have it corrected, or deleted;
restrict how we use it, or object to our using it;
receive it in a portable format;
withdraw your consent at any time, without affecting what was done before;
complain to a data protection authority: in the EEA, the authority in your country (see the list of authorities); in the UK, the Information Commissioner's Office. Switzerland's authority is the Federal Data Protection and Information Commissioner.

In India, under the Digital Personal Data Protection Act, 2023, you have the right to:

a summary of the personal data we process and of who we share it with;
have it corrected, completed, updated or erased;
withdraw your consent at any time;
have a grievance answered by us, and then, if you are not satisfied, complain to the Data Protection Board of India;
nominate someone to exercise these rights for you if you die or become unable to.

In California, under the California Consumer Privacy Act, you have the right to know what personal information we collect and use, to have it deleted or corrected, and not to be treated differently for using these rights. We don't sell your personal information or share it for cross-context behavioural advertising.

Elsewhere, you have the rights your local law gives you, and we will help you use them.

To use any of these rights, email orieljs.team@gmail.com. We reply within 30 days, and we may ask for information to confirm that a request is yours. Because analytics data is not linked to names, we may need your help to find yours, such as the value of the _ga cookie in your browser.

Children#

The site is written for software developers and is not directed at children. We don't knowingly collect personal data from anyone under 16, or under 18 in India. If you think a child has sent us personal data, email us and we will delete it.

Security#

The site is only served over HTTPS, so pages and analytics travel encrypted. Access to the analytics account is limited to the people who run the project.

Automated decisions#

We don't make decisions about anyone based solely on automated processing, and we don't build profiles for advertising.

Links to other sites#

The site links to other services, such as GitHub and npm. They have their own privacy policies, which apply when you visit them.

Changes to this policy#

When this policy changes, we update the date at the top of this page. If a change affects what analytics collects, the cookie banner asks for your answer again.

Contact#

The OrielJs Project, India. Email: orieljs.team@gmail.com.