Privacy and Cookie Policy
Last Updated: April 22, 2026
This Privacy & Cookie Policy explains how personal data and cookies are collected, used, and processed by Gwennaël Grandmougin (“we,” “us,” or “our”), Data Controller for the ggLowCodeGTMKit open-source project, when you visit youdontknowga.com (the “Site”).
Data Controller: Gwennaël Grandmougin France Contact: [email protected]
1. Information We Collect
Section titled “1. Information We Collect”A. Information You Provide
Section titled “A. Information You Provide”We do not require you to create an account or provide personally identifiable information (PII) to access the documentation or download the open-source templates.
If you voluntarily subscribe to our newsletter or waitlist, we collect your email address for the sole purpose of sending you communications you have explicitly requested. You may unsubscribe at any time via the link included in every email.
B. Information Collected Automatically
Section titled “B. Information Collected Automatically”When you visit the Site, certain technical information is collected automatically to help us understand how the documentation is used and to improve the library and website. This includes:
- Device & Browser Data: Browser type, operating system, and device type
- Usage Data: Pages viewed, time spent on pages, and search queries used within the library
- Referral Data: The website or platform from which you arrived
- IP Address: Collected by our hosting infrastructure for security purposes; anonymized before any analytics processing
This data is processed in aggregated, anonymized format and is not used to identify you individually, except where required for security purposes.
2. Cookies and Tracking Technologies
Section titled “2. Cookies and Tracking Technologies”We use cookies and similar tracking technologies on the Site. Cookies are small data files stored on your device by your browser.
Cookie Categories
Section titled “Cookie Categories”Essential Cookies Required for the Site to function correctly. These cookies do not require your consent. They include:
| Cookie | Purpose | Duration |
|---|---|---|
theme_preference | Remembers your dark/light mode selection | 1 year |
starlight-sidebar | Remembers sidebar state in the documentation | Session |
Analytics Cookies (require consent) We use Google Analytics 4 (GA4) to understand how visitors interact with the Site. GA4 sets cookies to distinguish unique anonymous visitors and track session activity. These cookies are only activated after you have given explicit consent via our cookie banner.
| Cookie | Purpose | Duration |
|---|---|---|
_ga | Distinguishes unique visitors | 2 years |
_ga_* | Stores session state | 2 years |
Google Analytics 4 is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes data on our behalf under a Data Processing Agreement compliant with GDPR Article 28. Data may be transferred outside the European Economic Area subject to Standard Contractual Clauses. For more information, see Google’s Privacy Policy.
Advertising & Retargeting Cookies (require consent) We may use advertising technologies from Google Ads and Meta (Facebook) to display relevant ads to visitors who have previously interacted with the Site. These cookies are only activated after you have given explicit consent via our cookie banner.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_gcl_au | Google Ads | Links ad clicks to on-site activity for conversion tracking | 90 days |
_gac_* | Google Ads | Stores campaign information for conversion attribution | 90 days |
_fbp | Meta (Facebook) | Identifies browsers for ad delivery and measurement | 90 days |
_fbc | Meta (Facebook) | Stores click identifiers from Facebook ad links | 90 days |
Google Ads is operated by Google Ireland Limited. Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, operates the Meta Pixel. Both process data under Data Processing Agreements compliant with GDPR Article 28. Data may be transferred outside the European Economic Area subject to Standard Contractual Clauses.
For more information, see Google Ads Data Protection Terms and Meta’s Data Policy.
We do not sell any visitor data. Retargeting data is used exclusively to show relevant ads to previous visitors of this documentation site.
Managing Your Consent
Section titled “Managing Your Consent”When you first visit the Site, a cookie consent banner will ask for your explicit consent before any analytics cookies are activated. You may:
- Accept — analytics cookies are activated
- Decline — only essential cookies are used; no analytics data is collected
- Change your preferences at any time via the cookie settings link in the footer
Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
3. Legal Basis for Processing (GDPR)
Section titled “3. Legal Basis for Processing (GDPR)”We process personal data under the following legal bases:
| Processing Activity | Legal Basis |
|---|---|
| Analytics cookies (GA4) | Consent — Art. 6(1)(a) GDPR |
| Advertising / retargeting cookies (Google Ads, Meta) | Consent — Art. 6(1)(a) GDPR |
| Newsletter / waitlist emails | Consent — Art. 6(1)(a) GDPR |
| Server logs / security | Legitimate interest — Art. 6(1)(f) GDPR |
| Responding to privacy requests | Legal obligation — Art. 6(1)(c) GDPR |
4. Data Retention
Section titled “4. Data Retention”| Data Type | Retention Period |
|---|---|
| GA4 analytics data | 14 months (configured in GA4 property settings) |
| Google Ads conversion data | 90 days (cookie lifetime) |
| Meta Pixel data | 90 days (cookie lifetime) |
| Newsletter email addresses | Until you unsubscribe |
| Server access logs | 30 days |
5. Third-Party Services
Section titled “5. Third-Party Services”The Site relies on the following third-party infrastructure:
- Vercel — hosting and deployment. Vercel logs standard server request data for operational and security purposes. Vercel Privacy Policy
- Google Analytics 4 — web analytics, activated only with your consent. Google Privacy Policy
- Google Ads — advertising and retargeting, activated only with your consent. Google Ads Data Protection Terms
- Meta (Facebook) Pixel — advertising and retargeting, activated only with your consent. Meta Data Policy
- GitHub — source code hosting. The public GitHub repository does not collect visitor data from the Site. GitHub Privacy Policy
We do not sell, rent, or share any visitor data with third-party data brokers, advertisers, or marketing platforms.
6. Open-Source Templates — Important Distinction
Section titled “6. Open-Source Templates — Important Distinction”This Privacy Policy applies exclusively to the documentation website (youdontknowga.com).
The ggLowCodeGTMKit variable templates execute entirely within your own Google Tag Manager containers, on your own website. We have no access to any data processed by the templates you install. Our templates do not send telemetry, usage data, or any tracking information back to us. Everything you deploy runs in a sandboxed environment under your full control.
7. Your Rights Under GDPR and CCPA
Section titled “7. Your Rights Under GDPR and CCPA”If you are located in the European Union, European Economic Area, or the United Kingdom, you have the following rights under the GDPR:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of your personal data
- Right to restriction — request that we limit how we use your data
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — at any time, without affecting prior processing
If you are a California resident, you have additional rights under the CCPA, including the right to know what personal information is collected and the right to opt out of its sale. We do not sell personal information.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with your national supervisory authority. In France, this is the CNIL (www.cnil.fr).
8. Data Security
Section titled “8. Data Security”We implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. The Site is served exclusively over HTTPS. Access to analytics data is restricted to the Data Controller.
9. Changes to This Policy
Section titled “9. Changes to This Policy”We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top of this document. We encourage you to review this policy periodically.
10. Contact
Section titled “10. Contact”For any questions, requests, or concerns regarding this Privacy Policy:
Gwennaël Grandmougin
Email: [email protected]
GitHub: github.com/gtmkit/ggLowCodeGTMKit