NutriScrolls

Privacy policy

How NutriScrolls handles personal data: Google Analytics 4 with Consent Mode v2, cookies, Cloudflare, retention periods and your rights under the GDPR.

By · Updated

Editorial policy · How we use data

Last updated: 25 October 2026

This policy explains what personal data NutriScrolls handles, why, and what your rights are. We collect as little as we can. Analytics runs only if you accept it, and we never sell data.

Who is responsible

NutriScrolls is run by Gerritjan Boeve in the Netherlands. He is the controller of your personal data under the General Data Protection Regulation (GDPR, in Dutch the AVG). You can reach him at [email protected] about anything in this policy.

What NutriScrolls does not do

  • There are no visitor accounts. You never need to sign up or log in.
  • There is no newsletter and no mailing list.
  • There are no ads, no sponsored content and no affiliate links.
  • We do not sell, rent or share personal data for marketing.

On your first visit, a banner called “Your privacy choices” asks whether you accept analytics. Until you choose, and if you reject, NutriScrolls sets no cookies and Google Analytics does not load.

Your choice itself is not stored in a cookie. It is kept in your browser’s local storage under the key “ns_consent”, for 183 days (about six months). After that, or when this policy changes what we collect, the banner asks again.

If your browser sends a Global Privacy Control signal, we treat it as a rejection. The banner does not appear and analytics stays off, unless you accept it yourself through Cookie settings.

Cloudflare, which delivers the site, may set a strictly necessary security cookie when it needs to check that a visitor is not a bot. It is not used for analytics or advertising.

Google Analytics

If you click “Accept analytics”, we use Google Analytics 4 to count visits and see which pages and tools people use. This helps us decide what to improve. It runs only on the live site, not on test copies.

When it runs, Google Analytics collects:

  • the pages you view, the page you came from, and the time of your visit;
  • your device type, browser, operating system, screen size and language;
  • your approximate location, such as your country or city, estimated from your IP address;
  • a random ID that tells repeat visits apart;
  • a few actions on the page: searches on the site, clicks on links to other sites, file downloads, how far you scroll on long pages, and pages that were not found;
  • changes to the site settings for region, units and theme, and whether personal needs are switched on or off.

After you accept, Google Analytics sets two cookies: “_ga” and one that starts with “_ga_”. They hold the random ID and last up to two years. If you later reject analytics, the site deletes them.

We have switched off Google signals and ad personalisation, so the data is not linked to Google accounts or used for ads. Google Analytics 4 does not log or store your IP address. Google uses it only briefly, to estimate your rough location.

We only look at totals, such as how many people read a page. We do not try to find out who you are. Google keeps the analytics data for a limited period that we set in Google Analytics, and then deletes it automatically.

Google Ireland Limited processes this data for us. Google may transfer data to the United States, and it is certified under the EU-U.S. Data Privacy Framework. The legal basis is your consent (GDPR Article 6(1)(a)), which you can withdraw at any time.

Your preferences stay in your browser

The settings menu in the header lets you choose a region, units, a light or dark theme, and personal needs. Personal needs means your sex, your age and, if it applies, pregnancy or breastfeeding.

These choices are stored only in your browser, in local storage under the key “nutriscrolls_prefs”. They are never sent to our server. You can remove them at any time by clearing your browser’s data for this site.

If you accepted analytics, Google Analytics records that you changed the region, units or theme, and whether personal needs are on or off. Your sex, age and life stage are never sent anywhere.

Hosting and server logs

NutriScrolls is hosted by Hetzner Online GmbH on servers in Germany. Cloudflare, Inc. sits in front of the site as a content delivery network and security service. Every request passes through Cloudflare before it reaches our server.

Like any website, the server and Cloudflare record technical data for each request. This includes your IP address, the page you asked for, the date and time, and your browser type. We use it only to keep the site secure, stop abuse and fix errors.

We keep these logs only as long as needed for those purposes, and then they are deleted. The legal basis is our legitimate interest in running a safe and working website (GDPR Article 6(1)(f)).

Hetzner and Cloudflare both work for us as processors. Cloudflare is a U.S. company and is certified under the EU-U.S. Data Privacy Framework.

Embedded videos

A few pages show a video from YouTube, a Google service. We use YouTube’s privacy-enhanced mode. Embedded videos load from YouTube only after you click play.

Until you click play, nothing is sent to YouTube. Once you play a video, YouTube receives your IP address and may set cookies, as described in Google’s own privacy policy.

When you email us

If you write to [email protected], we receive your email address, your name if you include it, and your message. We use them only to reply to you and, if needed, to correct a page.

We keep your email only as long as we need it to handle your message. We never add your address to a list or use it for anything else. The legal basis is our legitimate interest in answering you (GDPR Article 6(1)(f)).

Your rights

Under the GDPR you have the right to:

  • Access: ask what personal data we hold about you and get a copy.
  • Rectification: have incorrect data corrected.
  • Erasure: have your data deleted.
  • Restriction: ask us to limit how we use your data.
  • Objection: object to processing that is based on our legitimate interest.
  • Portability: receive the data you gave us in a common format.
  • Withdraw consent: change your analytics choice at any time. This does not affect what happened before.

To use any of these rights, email [email protected]. We reply within one month. In most cases we cannot link analytics data to you, because we do not know who you are.

If you think we handle your data wrongly, please tell us first so we can put it right. You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

How to change your choice

You can change your analytics choice at any time. Click “Cookie settings” at the bottom of any page, or use this link: Cookie settings.

The “Your privacy choices” banner then opens, and you can accept or reject analytics. Rejecting stops Google Analytics and deletes its cookies.

Children

NutriScrolls is a general reference and is not aimed at children. We do not knowingly collect data about children.

Changes to this policy

We update this page when the site changes how it handles data. The date at the top shows the latest version. If we start to collect something new, the banner asks for your choice again.