PRIVACY

This site sets no cookie, stores nothing on your device, and holds no account, login or profile. Two measurement scripts run, and they are described below in full. There is nothing else.

Who runs this: Omar Shabab, an individual, in Singapore. This is a personal, non-commercial project and is not affiliated with any government agency.
Contact: [email protected]. The same address is published in the harvester’s User-Agent, so a portal operator who wants their catalogue left alone reaches the same inbox.
What is processed: When you request a page, the request carries your IP address, the page asked for, the referring page if any, and your browser’s user-agent string. The two measurement scripts derive an approximate location (country level) and a device type from these. No identifier is stored, so a second visit is not recognised as yours and nothing follows you to another site.
Why: To know which pages are read and which are not, which is what decides what gets worked on next. The legal basis is legitimate interest, Article 6(1)(f) GDPR. You can object: see below.
Who receives it: Cloudflare, Inc., which hosts and serves this site and runs Cloudflare Web Analytics, and Google LLC, which runs Google Analytics. Both are US companies. Nobody else receives anything, and nothing is sold, shared for advertising, or used to train anything.
Leaving the EEA: Both are certified under the EU-U.S. Data Privacy Framework, which the European Commission has found to provide adequate protection, and both additionally rely on Standard Contractual Clauses. Checked against Google’s data-transfer page and Cloudflare’s GDPR page on 30 August 2026.
How long: This site keeps nothing itself: it is static files with no database and no server-side log of its own. Cloudflare and Google retain what they receive under their own policies, linked above.
Your rights: Access, rectification, erasure, restriction, portability, and objection under Articles 15 to 22 GDPR, and the equivalent rights under Singapore’s Personal Data Protection Act. Because nothing here is stored against an identifier, there is in practice no record of you to produce or delete, which is the point of building it this way. You may also complain to a data protection authority: in the EEA, the one for the country you live in.
Which law: Singapore’s PDPA applies to the operator. The GDPR applies to visitors in the EEA by way of Article 3(2)(b), because the measurement described above monitors their behaviour on this site.

The two scripts, exactly

Cloudflare Web Analytics counts page views. It is cookieless by design and sets no identifier.

Google Analytics 4 runs in Consent Mode with analytics_storage, ad_storage, ad_user_data and ad_personalization all set to denied before the Google tag loads, and nothing on this site ever grants them. That means it sends cookieless pings: no cookie is written, no user identifier exists, and returning visitors are not recognised. Your IP address is still transmitted to Google when the ping is sent, which is why this page exists rather than a claim that nothing is collected. Google states that it does not log or store IP addresses from Google Analytics and drops EEA IPs before logging.

There is no consent banner. Nothing is written to or read from your device, so there is no storage to consent to under Article 5(3) of the ePrivacy Directive as this site reads it. That reading is a considered position, not a settled one: the EDPB’s guidelines on the technical scope of Article 5(3) take a broad view of what counts as gaining access to information on terminal equipment. If it is wrong, the remedy is to remove Google Analytics, not to add a banner and start setting cookies.

How to object

Any content blocker, or your browser’s tracking protection, stops both scripts; the site works identically without them, because they are the only scripts here that are not the site itself. Or write to [email protected].

Data about other people

This site republishes catalogue metadata from government open-data portals: dataset titles, identifiers and the names of publishing bodies. That material occasionally carries personal data the source portal put there, so email addresses are removed from titles and publisher names before publication and the removal is marked where it happened. If you find personal data about yourself on this site, write to [email protected] and it will be removed. Removing it here does not remove it from the source portal, which holds the original.

Last reviewed 30 August 2026.