Privacy Policy
Last updated: November 7, 2026
This policy covers the CASL documentation website at casl.js.org, operated by Serhii Stotskyi. For privacy questions or requests, contact sergiy.stotskiy@gmail.com.
The CASL packages do not include the website's analytics. Installing or using CASL in your application does not enable the tracking described here.
Website analytics
We use Umami Cloud to understand which documentation people read, how well search works, and which consulting information is useful.
Umami collects pageviews, page URLs and titles, referring URLs, browser and operating system information, device information, language, and approximate location. Network requests also expose your IP address to the service. Umami's web tracker does not use cookies.
Analytics is off by default. We load Umami and send analytics events only after you select Accept analytics. You can select Reject analytics and continue using the documentation, or change your choice through Analytics preferences in the footer. Withdrawing consent stops future tracking; it does not automatically delete previously collected records.
We also send these custom events:
| Interaction | Additional information sent |
|---|---|
| Documentation search | Search text and the number of matching pages |
| Consulting inquiry link | The location of the link on the page |
| Authorization timeline | The selected stage |
Search runs in your browser, but the search text is also sent to Umami as analytics data. Avoid entering passwords, access tokens, personal information, or confidential project details into documentation search.
We do not configure Umami with your name, email address, or an account identifier. We do not enable session replay or use these events for targeted advertising.
See Umami's documentation, privacy policy, and data processing agreement.
Consulting inquiries
Our consulting pages load Tally's form widget. Tally receives technical request information when the widget loads. If you submit an inquiry, we receive the information you choose to provide, such as your contact details and a description of your project.
We use this information to respond, discuss your requirements, and arrange consulting services. Please do not submit credentials or sensitive personal information. See Tally's privacy notice.
Hosting and external services
The website is hosted on GitHub Pages. GitHub processes technical request information, including IP addresses, to deliver and secure the website. See GitHub's privacy statement.
Some pages request public GitHub star counts and npm download counts directly from those services. These requests expose your IP address and normal request information to the respective provider. See npm's privacy policy.
If you follow links to GitHub, social networks, sponsorship platforms, or other external websites, their own privacy policies apply.
Browser storage
The website uses a service worker and browser caches to make documentation available offline and speed up loading. It also stores public GitHub star counts and npm download counts locally. Those counts are refreshed after 24 hours; stored entries can remain until replaced or cleared.
We remember your analytics choice in local storage for 180 days, after which we ask again. If browser storage is unavailable, your choice applies only to the current page visit. This preference is used to honor your decision, not to track you.
You can remove this data through your browser's site-data settings. Clearing it may remove offline documentation and cause the website to download content again.
Purposes and legal bases
Where the GDPR applies, we rely on your consent for analytics. We rely on our legitimate interests in delivering and securing the website for its operation. For consulting inquiries, we process information to take steps at your request before entering a contract, or on our legitimate interest in responding to business correspondence.
Retention and international processing
Analytics records are held in our Umami Cloud account under its applicable retention settings and service terms. Consulting correspondence is kept for the time needed to handle the inquiry and any resulting engagement, and longer where necessary for legal obligations or legal claims. Hosting and service providers maintain their own operational logs under their respective policies.
Our providers may process information outside your country, including outside the European Economic Area. Umami's data processing agreement describes its international-transfer safeguards, including standard contractual clauses where applicable. The other providers' policies explain their processing locations and safeguards. Contact us for information about the arrangements that apply to your data.
Your choices and rights
You can read the documentation without submitting an inquiry. Blocking analytics requests does not prevent you from reading it.
Depending on applicable law, you may request access to, correction or deletion of your personal data, restriction of processing, or data portability, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it. You may also complain to your local data protection authority; in Poland, this is UODO.
Email the contact above to make a request. We may need additional information to locate relevant records or verify your request. We do not collect extra identifying information solely to identify visitors in analytics.
We will update this page when our practices change and revise the date above.