# {octicon}`shield-lock` OGGM Privacy Statement

_Last updated: 09.03.2026_

Welcome to the privacy statement for **OGGM-related webpages and software**. This document explains how personal data may be processed when you use OGGM services.

"Personal data" means any information relating to an identified or identifiable person.

---

## Scope

This Privacy Statement applies to the following services:

- Static webpages: **[oggm.org](https://oggm.org)**, **[docs.oggm.org](https://docs.oggm.org)**, **[edu.oggm.org](https://edu.oggm.org)**, **[tutorials.oggm.org](https://tutorials.oggm.org)**, **[community.oggm.org](https://community.oggm.org)**
- Bokeh server: **[bokeh.oggm.org](https://bokeh.oggm.org)**
- OGGM data server: **[cluster.klima.uni-bremen.de](https://cluster.klima.uni-bremen.de)**

These webpages and services are operated by **OGGM e.V.**, which acts as the **Data Controller** for personal data processed through these services.

Technical infrastructure for the Bokeh server and the data server is hosted on servers operated by the **University of Bremen**, which provides infrastructure and system administration.

For privacy information related to the OGGM hubs (**hub.oggm.org** and **classroom.oggm.org**), please refer to the OGGM Hub privacy notice: [](hubs/privacy-notice).

---

## Intended use

OGGM services are provided for **research and teaching purposes related to OGGM**.

All data and code distributed through OGGM services are intended for open scientific use. OGGM does not knowingly collect personal data beyond what is required for the technical operation of its services.

---

## Personal data processed

When using OGGM services, limited technical data may be processed depending on the service.

### Static webpages

OGGM static webpages are hosted on **GitHub Pages**.

OGGM itself does not collect personal data through these pages. However, requests to these websites are handled by GitHub infrastructure, which may process technical information such as IP addresses in accordance with GitHub’s policies.

For details, refer to the GitHub Pages documentation:
https://docs.github.com/en/pages/getting-started-with-github-pages/what-is-github-pages#data-collection

### Bokeh server and data server

System logs generated by the server infrastructure may contain:

- IP address
- timestamps of requests
- system activity related to the operation of the service

These logs are used solely for the operation, maintenance, and security of the services.

---

## Legal basis for processing

Personal data is processed on the basis of **legitimate interest (Article 6(1)(f) GDPR)**, specifically for:

- providing access to OGGM services
- maintaining system security
- detecting misuse or technical problems
- operating and improving the infrastructure

---

## Data storage and retention

Server logs that may contain IP addresses are retained for **up to 90 days** and are automatically deleted thereafter unless longer retention is required to investigate technical or security incidents.

---

## Analytics

OGGM webpages may use **Plausible Analytics**, a privacy-friendly analytics service.

Plausible Analytics:

- does **not use cookies**
- does **not track users across websites**
- does **not collect personally identifiable information**

It provides aggregated statistics that help improve documentation and services.

More information:
https://plausible.io/data-policy

---

## Cookies

OGGM services do **not use tracking or advertising cookies**.

Some technical components of hosting infrastructure or web frameworks may use **temporary session cookies** that are strictly necessary for the operation of the service.

These cookies are used only for technical functionality.

---

## Responsibility for data and service availability

OGGM services are provided free of charge as a service to the community.

While reasonable efforts are made to maintain the infrastructure, **OGGM e.V. cannot guarantee continuous service availability**.

---

## Your rights

Under applicable data protection laws, including the **General Data Protection Regulation (GDPR)**, individuals have rights regarding personal data, including the right to:

- request access to personal data
- request correction or deletion
- object to certain types of processing

Requests may be sent to:

**info@oggm.org**

---

## Changes to this statement

This privacy statement may be updated periodically to reflect changes in OGGM services or applicable regulations.

The most recent version will always be available on this page.