Privacy

The ctdl-validate playground checks CTDL JSON-LD in your browser. This page says what leaves your browser when you use it, and where it goes.

What you validate stays in your browser

The payload you paste, the files you load, the documents you add to resolve references against, the report and the share link are never sent anywhere: not to this site, not to Google, not to anyone. The validator runs in your browser through Pyodide (WebAssembly). A share link carries the payload after the # in the address. Browsers do not send that part to a server, and the analytics below is given the page address without it.

Google Analytics

This site counts visits with Google Analytics 4 (GA4), which Google runs for the site's author. For each page you open, GA4 receives:

• the page address, without anything after a # or ?
• the address of the page that linked you here, if your browser sends it
• your browser, operating system, screen size and language, and a rough location that Google works out from your IP address (GA4 does not store the IP address itself)
• when you scroll to the bottom of a page, click a link to another site or download a file
• a random ID kept in two first-party cookies, _ga and _ga_QQV001MBJ7, for up to two years, so that a return visit can be told apart from a new one. _ga is shared by every site under chelseakr.github.io.

Google signals and ad personalization are off, and the advertising consent signals are denied, so nothing here is used for advertising. There are no accounts and no user IDs.

In the European Economic Area, the UK and Switzerland, analytics cookies are off by default, so GA4 does not set its cookies there. Google still receives a cookieless ping for each page view, with no ID that links one visit to another.

Google keeps this data for 14 months and then deletes it. Google processes it in the United States, as described in How Google uses information from sites that use its services.

When analytics does not load

The page makes no request to Google and sets no Google cookie when any of these is true:

• your browser sends Global Privacy Control or Do Not Track
• you opted out on this device, with the button below or the one in the playground's footer
• JavaScript is off

Opting out on this device

The opt-out button stores ctdl-validate:analytics-opt-out in this browser's local storage. That is not a cookie, and it is never sent anywhere. "Opt back in" removes it, and so does clearing this site's data. Opting out does not delete _ga cookies you already have, because other chelseakr.github.io sites share them. They expire on their own, and this site sends nothing to Google while you are opted out. Google also offers a browser add-on that turns Google Analytics off everywhere.

Hosting

GitHub Pages hosts this site, and GitHub may log visitors' IP addresses; see the GitHub General Privacy Statement. The validator's runtime is downloaded from cdn.jsdelivr.net, which sees an ordinary request for it.

Questions

Open an issue at github.com/ChelseaKR/ctdl-validate.