Privacy & Cookie Policy
Last updated: 6 July 2026
This policy explains what data nfpplaybook.com collects, why, and the choices you have. The short version: this is a publishing site. We don't run accounts, we don't sell anything, and the only personal data processing that happens is optional analytics, which is off until you switch it on.
Who we are
NFP Playbook is the publisher of nfpplaybook.com and the controller of any personal data processed through it (for the purposes of the EU and UK General Data Protection Regulation, where those apply to you).
What we collect and why
Analytics (only with your consent)
We use Google Analytics 4 to understand which guides get read, so we can decide what to write and improve. Google Analytics uses cookies and collects information such as pages viewed, approximate location (derived from a truncated IP address), device and browser type, and how you arrived at the site.
Analytics does not run unless you choose "Allow analytics" on the cookie banner. If you decline, or simply ignore the banner, no analytics code loads and no analytics cookies are set. Whatever you choose is remembered in your browser's local storage so we don't ask on every visit. You can change your mind at any time using the "Cookie settings" link in the footer of every page.
The legal basis for this processing, where GDPR applies, is your consent (Article 6(1)(a)). Analytics data is processed by Google LLC, which may involve transfers outside the EU/UK under Google's applicable safeguards, including the EU–US Data Privacy Framework. Google's own privacy policy is at policies.google.com/privacy.
Server logs
The site is hosted on GitHub Pages, operated by GitHub, Inc. Like virtually all web hosts, GitHub may log IP addresses of visitors for security and operational purposes. This logging is described in GitHub's privacy statement and is not controlled by us.
Cookies and similar technologies
| Name | Type | Purpose | Duration |
|---|---|---|---|
| nfpp-consent | Local storage (strictly necessary) | Remembers your cookie choice so the banner doesn't reappear | Until you clear it or change your choice |
| _ga, _ga_* | Cookies (analytics, consent only) | Google Analytics: distinguishes visitors and sessions | Up to 2 years |
No advertising or cross-site tracking cookies are used on this site.
What we don't do
- We don't collect names, email addresses or account details; the site has no forms or login.
- We don't sell or share personal data with third parties for their own purposes.
- We don't use analytics data to identify individuals, and we have configured IP anonymisation.
Data retention
Google Analytics user-level data is retained for 14 months, after which it is deleted automatically. Aggregated statistics (which contain no personal data) may be kept longer.
Your rights
If you are in the EU, UK, or another jurisdiction with equivalent data protection law, you have rights over your personal data, including access, rectification, erasure, restriction, portability, and the right to withdraw consent at any time (via the "Cookie settings" footer link) without affecting the lawfulness of prior processing. You also have the right to lodge a complaint with your local supervisory authority: in the EU, your national data protection authority; in the UK, the Information Commissioner's Office (ico.org.uk).
Because we hold no directly identifying information about you, exercising rights over analytics data is usually best done through the controls above or Google's own Analytics opt-out tools.
Children
This site is written for a professional audience and does not knowingly collect data from children.
Changes to this policy
If we change how the site processes data (for example, adding a newsletter), this policy will be updated and the "last updated" date revised before the change takes effect.