Privacy policy
Last updated: September 30, 2026
This policy explains what information WW2.design ("we", "us") collects when you visit ww2.design or any of its subdomains, such as mitsubishi.ww2.design and norden.ww2.design (together, the "sites"), and how we use it. Every site links to this policy, and it applies to all of them.
The short version: we measure how the exhibits are used so we can improve them. We do not ask for your name or email address, we do not sell information, and we do not use advertising or third-party trackers.
Information we collect
Usage information. When you use a site, your browser sends us records of what happens on the page:
- the pages you view (the address path, without query strings or fragments) and the website that referred you, recorded as a hostname only;
- how long each page is active in the foreground;
- the links, buttons and parts of an exhibit you select, the items you view and for how long, and other interactions with an exhibit, such as completing a tour;
- the type of device (desktop, tablet or mobile) and whether the request appears to come from an automated program, both derived from your browser's user agent (the user agent itself is not stored);
- the country you are visiting from, as determined by our content delivery network from your IP address.
Random identifiers. To count visits without identifying you, we use:
- a random visitor ID stored in a first-party cookie named
ww2_vid, which is shared by ww2.design and its subdomains so that moving between exhibits counts as one visitor; it lasts one year from your most recent visit; - a random session ID stored in your browser's session storage, which ends when you close the tab or after 30 minutes without activity;
- a random ID for each page view.
These identifiers are not linked to your name, email address or any account.
IP addresses. Your IP address is used to deliver the sites to you and, briefly, to limit abusive traffic: we store a keyed one-way hash of it for no more than one day. We do not store IP addresses with usage information.
Information you choose to give us. If you email us, we receive your email address and whatever you include in your message.
We do not collect your name, contact details, precise location, payment information or the contents of any form fields, and we do not fingerprint your browser.
Cookies and similar technologies
| Name | Purpose | Duration |
|---|---|---|
ww2_vid |
Random visitor ID for usage measurement, shared across ww2.design and its subdomains | 1 year |
ww2-analytics-session (session storage) |
Random session ID | Until the tab closes or 30 minutes without activity |
Sign-in cookies (names containing authjs) |
Keep site administrators signed in to the private analytics dashboard; set only for administrators | Up to 1 day |
We do not use advertising, social media or cross-site tracking cookies. You can block or delete cookies in your browser settings; the exhibits work without them, and blocked measurement requests simply are not recorded.
How we use information
We use usage information to understand which exhibits, features and explanations visitors find useful, to find and fix problems, to improve the accuracy and design of the exhibits, and to protect the sites from abuse. We look at it in aggregate, for example the number of visitors to an exhibit or the median time spent on a tour step.
How information is shared
We do not sell or rent information, and we do not share it for advertising.
We use service providers to run the sites. Amazon Web Services hosts the sites and stores usage information in the United States. GitHub provides sign-in for site administrators. These providers process information on our behalf and under their own security obligations.
We may disclose information if required by law, to protect the rights, safety or property of our visitors or others, or as part of a transfer of the sites to a new operator, who would remain bound by this policy for information already collected.
Retention
Usage records are deleted automatically two years after they are collected. Hashed IP records used to limit abuse are deleted within one day. Emails are kept as long as needed to respond and for our records.
Security
Usage information is stored in a private, encrypted storage bucket and is available only to site administrators, who sign in with GitHub. No method of transmission or storage is completely secure, but we take reasonable measures to protect the information we hold.
Your choices and rights
You can prevent measurement by blocking cookies or scripts for ww2.design, or by using a content blocker. Depending on where you live, you may have rights to access, correct, delete or object to the processing of personal information about you. Because usage records are tied only to random identifiers, we usually cannot link them to you; if you would like to exercise a right, contact us and we will help where we can.
Children
The sites are educational and suitable for general audiences, but they are not directed at children under 13, and we do not knowingly collect personal information from them.
Visitors outside the United States
The sites are operated from the United States, and information is stored there. By using the sites, you understand that your information will be processed in the United States.
Changes to this policy
We may update this policy as the sites change. We will change the date at the top of this page, and significant changes will be noted on the sites.
Contact
Questions about this policy can be sent to privacy@ww2.design.