Privacy Policy

Last updated: 10 October 2026

FlagGeek is an independent flag research and documentation project run by Kenny Ytrup in Denmark. Kenny Ytrup is the data controller for FlagGeek's own processing of personal information. For privacy questions or requests, use the Contact page.

This policy describes FlagGeek V2, the replacement for the legacy Blogger site at flaggeek.net. There are no public user accounts or profiles, advertising trackers, or third-party behavioral analytics in V2.

Site statistics

When enabled, FlagGeek records limited server-side application telemetry to understand which material is used, identify errors and crawler activity, and keep the site operating reliably. Records may contain:

The request time, a recognized page path or an unknown-path category, request method, response status and a limited response classification.
Country-level location, browser family, operating-system family and device category.
The referring website's hostname, including subdomains, and classifications such as search-engine or AI referrals.
Crawler classifications and operational information needed to process and aggregate the records.

FlagGeek telemetry does not store raw IP addresses, full user-agent strings, precise location, full referrer URLs or query strings. It does not assign persistent visitor identifiers or create browser fingerprints. Statistics describe observed requests, not identified people.

Contact requests and messages are excluded from this telemetry. Private administrator traffic is excluded from public-site analytics, and staging/test traffic is kept separate from permanent production statistics.

Contact messages

If you choose to contact FlagGeek, your name, email address, subject and message are used to receive and respond to your enquiry and manage the correspondence. These details are required to submit the form; contacting FlagGeek is optional and is not required to browse the site.

Cloudflare Turnstile checks submissions for abuse. The Contact endpoint temporarily uses the connecting IP address to limit repeated submissions and sends it to Turnstile for verification. This is security processing, separate from application telemetry. Resend delivers accepted messages to FlagGeek's mailbox. The application does not save Contact messages in its telemetry database.

Cloudflare, Resend and private administration

Cloudflare hosts and delivers the site and its media and provides edge security. It processes network and security information, which may include IP addresses, request details and browser information. Turnstile also processes browser and connection signals to distinguish legitimate use from abuse. Cloudflare's infrastructure and security processing is separate from the limited information retained in FlagGeek's own telemetry.

Resend processes submitted Contact details and email delivery information to deliver correspondence. Cloudflare and Resend may process information outside Denmark and the European Economic Area, including in the United States. Their privacy information explains their processing, retention and international transfers: Cloudflare Privacy Policy, Turnstile Privacy Addendum and Resend Privacy Policy.

Cloudflare Access protects the private administrator area and processes administrator identity and authentication-session information. This is restricted administrative access, not ordinary public-site tracking. Telemetry reports are private.

Links to external research sources take you to independently operated websites. Their own privacy policies apply when you visit them.

Cookies and browser storage

FlagGeek does not use cookies or browser storage for advertising or behavioral analytics, and does not store public cookie preferences or account profiles. Its application telemetry works on the server without analytics cookies or persistent browser identifiers.

Cloudflare security services, Turnstile and private Cloudflare Access authentication may use necessary cookies or browser storage where required for security or functionality. Blocking these mechanisms may prevent Contact verification or private administrator sign-in.

How long information is kept

Detailed application telemetry: retained for approximately 90 days. Automated maintenance aggregates and purges these records.
Non-identifying aggregate statistics: may be retained indefinitely to preserve daily, monthly, yearly and all-time site history.
Contact and email: retained only as necessary for correspondence and related administration, including follow-up enquiries or applicable legal obligations. There is no fixed numeric mailbox deletion period; how long a message is needed depends on its purpose and any ongoing correspondence.
Provider infrastructure and security records: follow the relevant providers' retention policies and service terms, separately from FlagGeek's application telemetry schedule.

Why personal information is processed

Where personal information is involved, FlagGeek relies on its legitimate interests in operating and securing the site, understanding aggregate use, and responding to enquiries. Processing is limited to those purposes and must be balanced against your privacy rights. Information may also be retained or disclosed where necessary to comply with a legal obligation. Simply browsing the site is not treated as consent to advertising or behavioral tracking.

Your rights and privacy contact

Depending on the applicable law and circumstances, you may request access to, correction or deletion of personal information, restriction of processing, or a portable copy where that right applies. You may object to processing based on legitimate interests.

Use the Contact page for these requests or any privacy question. Enough information may be needed to verify your request and locate the relevant correspondence. FlagGeek does not maintain visitor profiles, and aggregate statistics may not be attributable to an individual.

You may also complain to Datatilsynet, the Danish Data Protection Agency, or your local data protection authority.

Changes to this policy

Updates will be published on this page with a revised last-updated date to reflect changes in how the site processes information.

FlagGeek · https://flaggeek.net/pages/privacy-policy/