Rron Nushi

Privacy & Cookies

Last updated: October 11, 2026

I’m Rron Nushi, based in Amsterdam, the Netherlands. I run rron.nl and its creative web apps. For privacy questions or requests, email [email protected].

Visiting the site

The WordPress website is hosted by Hostnet. Cloudflare provides DNS, proxying, security, and delivery for the website and some standalone apps. Serving a page involves processing your IP address and technical request information, such as the requested URL, browser information, and time of the request. I use these services to deliver and protect the site. The proposed GDPR basis for this processing is legitimate interests in operating a reliable, secure website; the documented assessment and provider arrangements remain under review.

Cloudflare also provides browser security checks and network-error reporting. These functions are separate from Google Analytics. Cloudflare’s network-error reporting documentation states that it does not log client IP addresses in that reporting pipeline. See Cloudflare’s privacy policy.

Optional Google Analytics

Google Analytics loads only after you select “Accept analytics.” It measures page visits and interactions using cookies and technical information, including a browser identifier, page path, device and browser information, and approximate location derived by Google from the request. Google receives the Analytics requests. Query strings and URL fragments are removed from the page address sent by this site’s Analytics loader, and advertising storage, Google Signals, and ad personalization are disabled by that loader.

The basis for Analytics is your consent. Select “Reject analytics” to use the site without it. You can change your choice using “Cookie settings” in the footer. Rejecting after acceptance stops future Analytics loading and removes accessible Analytics cookies on rron.nl; it does not erase information already sent to Google. Logged-in WordPress users are excluded. The standalone Chroma, Dither, Pattern, and Gradient Index apps and Rijkskleur do not load this WordPress Analytics tag.

Google processes data under its own service terms and privacy information. See Google’s privacy policy. The account’s event-data retention, linked services, processing agreement, and international transfer arrangements still need review.

Cookies and browser storage

  • Analytics choice: rron.analytics-consent.v1 in localStorage remembers acceptance or rejection for 180 days. It contains the choice and expiry time.
  • Analytics cookies: _ga and _ga_C14XEW5XH5 distinguish browsers and sessions after acceptance. The site’s loader limits their lifetime to 180 days without refreshing it on each page load.
  • Security: Cloudflare may set cf_clearance and, on the external Weerbeeld host, __cf_bm. They support security checks and bot protection. Their expiry depends on the host’s configuration; __cf_bm was observed with a 30-minute lifetime.
  • WordPress: login cookies support authenticated administration. wpEmojiSettingsSupports in sessionStorage caches emoji support for the browsing session.
  • Weerbeeld: localStorage keys starting with weerbeeld-hours-v3-, weerbeeld-live-v9-, and weerbeeld-history-v9- cache public Amsterdam weather data. The inspected code has no automatic expiry. You can clear this storage in your browser.

The consent choice, login, security, and feature caches serve their stated functions rather than advertising. Clearing browser storage removes saved preferences; the site will ask for an Analytics choice again.

Creative apps and external services

Generative Studio loads fonts from Google Fonts and a rendering library from Cloudflare’s cdnjs service. These providers receive your IP address and technical request information when those resources load. No Analytics tag or app browser-storage calls were found in the inspected Generative Studio sources. The WordPress site’s Inter font is served locally.

The inspected WordPress Lab generators render artwork in your browser. Nameflower uses the name you enter to generate its artwork locally. Its inspected code does not upload that name directly, but places it in the page URL for sharing. Opening or reloading that URL can disclose the name in requests to the website’s hosting and security services. Artwork exports are created in the browser.

Rijkskleur loads artwork images from iiif.micr.io when you open an artwork or create its poster. That image service receives your IP address and request information. The app’s collection data is served from rron.nl.

Weerbeeld embeds weerbeeld-amsterdam.r2on.chatgpt.site, which receives your request information and can use its own Cloudflare security cookies. It reads the rron.nl weather archive and calls Open-Meteo for Amsterdam weather, including hourly data. These browser requests disclose your IP address to the weather provider, but request fixed Amsterdam coordinates, not your device location. The external hosting provider and its retention arrangements still need confirmation.

Rronoscope embeds irpmxbte2atsfgfn.vercel.app, hosted on Vercel. That host receives your IP address and technical request information when the embed loads. No tracking cookies or browser-storage writes were observed in the tested initial view. Other app flows and the host’s retention arrangements still need review.

Email and your rights

UpdraftPlus is configured to store WordPress database and file backups in Google Drive. Its settings specify monthly backups and one retained scheduled backup set. Backups can contain WordPress account information and other data stored on the site. The actual backup schedule, manual copies, and deletion arrangements still need review; the configured count does not guarantee a fixed retention period.

The contact page uses email and external links. If you email me, I receive your email address and whatever information you include so I can respond. The proposed basis for ordinary inquiries is legitimate interests in handling correspondence, or steps toward a contract when applicable. The email provider and retention period still need confirmation.

You can request access, correction, deletion, or restriction of your personal data, object to processing based on legitimate interests, and request portability where applicable. You can withdraw Analytics consent at any time. Email [email protected] to make a request. You may also complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority.

Details still under review

Hosting and security-log retention, backup storage and retention, email handling, provider processing agreements, international transfers, and Google Analytics account settings have not all been verified. This page records the inspected website behavior and does not claim that every GDPR requirement has been confirmed. I will update it when these details are established.