Privacy & analytics

Two counters, both limited to which pages are used. GoatCounter, an open-source counter that sets no cookies and stores nothing in your browser, counts each page opened: its path and view name, the referring page cut to its address without query, your screen width and the browser named in your User-Agent; it runs without the banner because it keeps nothing on your device. Google Analytics 4 runs only after you accept the banner: Consent Mode v2 defaults to denied, so nothing is sent to Google — not even a request for the analytics library — before you choose. A Do Not Track or Global Privacy Control setting in your browser turns both off, and no banner is shown.

We record view names only (Search, Semantic Search, Check, Workspace, Statistics, Methodology, About). We never send your search queries, the filters or countries you select, or the judgments you open. The page address is stripped to its path before being sent, so a search you ran cannot leak through the URL or through the referrer on the next page you visit. Ad personalisation and Google signals are disabled, and GA4 discards the full IP address before storage.

On our server. The web server's log (your address, your browser and each request, including what was searched) is kept for 14 days for security and troubleshooting, then deleted; the search service also logs requests, without addresses. From the web log we keep only daily totals per tool: how many people used it, from which countries (looked up on our server, IP Geolocation by DB-IP), how many requests came from AI assistants and other programs, which kinds of search were run (phrase, filters, no result…), and the queries that at least three different people searched in the same week. Never an address, a browser, or a query fewer people searched.

“Who are you?” After you have used the site for a while, a small box asks once whether you are a lawyer, researcher, student, NGO, court or public institution. It is optional and anonymous: a click sends only that category to GoatCounter, and this browser remembers that it was answered or closed (who-v1:hudoc-researcher) so it is not asked again.

Your choice is kept in this browser's local storage (echr-analytics-consent) so you are not asked again. That record is strictly necessary to honour the choice itself.