Privacy
This site sets no cookies, runs no analytics and carries no advertising or tracking of any kind. There is no consent banner because there is nothing to consent to.
The only personal data this site handles is what your browser necessarily sends to fetch a page, and what you choose to put in an email to us. Both are described below in full.
Effective 30 August 2026 · page last reviewed 30.08.2026 · changes are published as a notice
This site sets no cookies, first-party or third-party. No consent banner is shown because none is required.
No analytics product, no page-view counter, no session recording, no heatmaps. We do not know how many people read a given page.
No advertising, no remarketing pixels, no cross-site identifiers, and no profiling of visitors for any purpose.
Images and stylesheets are served from our own domain. Web fonts on this prototype are not yet self-hosted; the exception is named at the foot of this page.
Server logs, and nothing else automatic
Each request to this site is written to a server log. A log line contains the following and no more:
| ip_address | Truncated to remove the final octet before the line is written, so it cannot identify an individual device. |
|---|---|
| timestamp | Date and time of the request, to the second. |
| path | The address requested, including any query string — which on this site means a filter or search term you typed. |
| status | The response code returned, used to find broken links and failing pages. |
| user_agent | The browser string your browser sends. Not linked to any other record. |
| bytes | Response size, used to diagnose performance faults. |
Logs are kept for 14 days and then deleted. They are read only to diagnose a fault or to investigate abuse of the site, never to build a profile of a visitor and never to measure engagement.
Who else receives anything
There are none. No visitor data leaves our infrastructure for measurement.
Search runs against a static index built with the site, in your browser. Your query is never sent to a third party.
Hetzner Online GmbH, Falkenstein, Germany serves this site and necessarily processes request data on our instruction, under a written agreement, for no other purpose.
Fastmail Pty Ltd, Melbourne, Australia carries correspondence to and from the addresses on the contact page, on the same basis.
Google Fonts currently receives a request from your browser when a page on this site loads (see public/styles/global.css). See the open item below.
Email you send us
Your address and message are kept for as long as the matter is open and then for two years, because a decision we take must be traceable to what we were told and when.
A submission that becomes part of a published record — a consultation response, a conformance application, a challenge to a register entry — is published with its author and date, and stays published permanently. That is stated on each of those pages before you submit.
What you can ask for, and how
Write to governance@aicertificationstandards.org. We answer within 10 working days, and within one month at the outside.