Privacy Policy

Last updated: August 17, 2026

1. What we collect

MAREF the open-source framework collects nothing. The software runs entirely on your infrastructure and no telemetry is sent anywhere.

This website (maref.cc) collects:

  • Standard web server logs: page requests, referring URLs, browser user-agent strings, IP addresses
  • Network-level information provided by Cloudflare: country/region, timezone, network ownership (ASN / organization name)
  • A session identifier: a randomly generated ID used to group page views from the same browsing session (see section 2)

2. Cookies and client-side storage

This website sets no cookies. We use the browser's sessionStorage and localStorage for exactly two purposes:

  • Session ID (sessionStorage) — a random string used to recognize multiple page views within a single browsing session, so we can understand how visitors move through the site. It contains no personally identifiable information, is never shared across sites, is never used for advertising, and is discarded by your browser when you close the tab.
  • Interface preference (localStorage) — remembers your light/dark theme choice. Purely functional, never used for analytics.

Cloudflare may set essential cookies for CDN functionality and security (e.g., bot mitigation). These are strictly operational and outside our control.

How to opt out: if your browser sends "Do Not Track" or Global Privacy Control (GPC), we generate no session ID and send no analytics requests at all. You can also opt out permanently by running the following in your browser console:

localStorage.setItem('maref-analytics-optout', '1')

3. How we use data

The data above is used exclusively for:

  • Diagnosing and fixing website issues
  • Understanding traffic patterns (which pages are visited, from which regions, and how visitors navigate)
  • Protecting the website from abuse and attacks
  • Understanding what kinds of organizations follow MAREF, so we can prioritize whose problems to solve first

We do not sell, share, or otherwise transfer your data to third parties. We do no cross-site tracking, serve no ads, and build no individual profiles.

4. Data retention

Web server logs and visit records are retained for a maximum of 30 days and then automatically deleted.

5. Third-party services

This website is hosted on Cloudflare Pages, and analytics data is stored in Cloudflare D1 (self-hosted — no third-party analytics platform is involved). Cloudflare's privacy policy applies to data processed by their infrastructure.

This website loads one third-party script: Baidu's search link-submission script (zz.bdstatic.com/linksubmit/push.js), used to submit pages for Baidu search indexing. It is provided by Baidu and its data handling is governed by Baidu's privacy policy.

Beyond that, we use no third-party analytics, tracking, or advertising services (no Google Analytics, no ad pixels, no social tracking code).

6. Your rights

Depending on your jurisdiction, you may have rights regarding your personal data, including access, correction, deletion, and portability. To exercise these rights, contact us at [email protected].

7. Contact

For privacy-related inquiries: [email protected]