Legal
Privacy Policy
This page explains what data is processed when you visit Icelandify. Last updated: November 2026.
Personal data we process and why
The site doesn’t ask visitors to register, sign up or identify themselves. The only things stored in your browser are your answer to the cookie notice and a few interface preferences; they stay on your device and are never sent to our server. The following categories of data are processed to run, secure and measure the site:
1. Server and security logs
- Data: your IP address, date and time of access, pages visited, browser type and version (User-Agent), operating system and referring URL.
- Providers: our hosting provider and content delivery network (CDN).
- Purpose: keeping the site secure, blocking DDoS and malicious bot traffic, and optimising server resources. Logs are kept for a limited period and then deleted.
2. Preferences stored on your device (localStorage)
- Data: your choice in the cookie notice (accept/decline).
- Purpose: remembering your choice so the cookie notice doesn’t reappear on every page. This data stays in your browser’s local storage and is never sent to our servers.
3. Visit statistics
- Data: pages visited, time on site and anonymous interaction data.
- Purpose: understanding which stories readers find useful. Analytics only run after you click “Accept” in the cookie notice; if you choose “Decline” they are blocked.
4. Fonts and images
Our fonts are hosted on our own server, so loading them doesn’t send your IP address to a third party. Some editorial photographs may be served from an image CDN; as with any web request, your browser shares your IP address and standard HTTP headers with that server to load them.
5. Newsletter, waitlist and contact
If you sign up for the newsletter or the photo-tour waitlist, we store your email address and the list you joined, and use it only to send what you signed up for. You can unsubscribe at any time. Messages you send to our contact address ([email protected]), meaning your name, email address and message, are used only to answer you.
Cookies
We use cookies and your browser’s local storage only where needed. They fall into two groups:
1. Essential and security (no consent required)
- Preference storage (cookie consent): remembers your answer to the cookie notice. It never leaves your device.
- Security cookies set by our CDN to tell real visitors from malicious bots. They don’t identify you and expire after a short time.
2. Analytics (optional)
These help us measure, anonymously, how many people visit, which stories are read most and how fast pages load. They are only switched on if you click “Accept”; if you click “Decline” or make no choice, no analytics code runs.
Changing or deleting your choice: you can delete stored cookies and local-storage data at any time in your browser settings, or block them completely.
International transfers
Your personal data is never sold to third parties or shared for advertising. Some of our infrastructure providers may process data outside the European Economic Area; where they do, transfers rely on the EU–U.S. Data Privacy Framework or Standard Contractual Clauses, and analytics only on your consent (GDPR Art. 6(1)(a)).
Your rights
Under the GDPR you have the right to access, correct and request deletion of your data. Send your request to [email protected].
Supervisory authority: the Icelandic Data Protection Authority (Persónuvernd) / personuvernd.is, or the data protection authority of the EU/EEA country where you live.