Privacy Policy

Data Collection. Iceland Roads does not collect personal information while you browse. We use temporary session storage for route planning; that data stays in your browser and is never sent to our servers. The only personal data we ever store is an email address you explicitly give us for road alerts (see “Email alerts” below).

Email alerts. If you subscribe to a road, weather, or aurora alert, we store your email address, what you chose, and subscription timestamps - nothing else. The legal basis is your consent (GDPR art. 6(1)(a)), given by double opt-in: no alert is ever sent until you click the confirmation link we email you. We use your address only for the specific alert(s) you requested, never for marketing, and we never share or sell it. Every alert email contains a one-click unsubscribe link (no login needed) that only removes that one alert - unsubscribing from one never affects any other alert you’ve separately confirmed. Unconfirmed and unsubscribed addresses are deleted from our systems automatically within 30 days. Data is stored and sent with Cloudflare (our infrastructure provider) and processed in the EU region. To exercise your rights of access, correction, or erasure under GDPR and the Icelandic Data Protection Act (lög 90/2018, supervised by Persónuvernd), use the unsubscribe link or email us.

Newsletter. Separately from the alerts above, you can opt in to occasional Iceland Roads news and updates. This is its own consent, for its own stated purpose - opting in here never adds you to any alert, and confirming an alert never adds you to this. Same double opt-in, same one-click unsubscribe, same 30-day deletion of unconfirmed/unsubscribed addresses, described above.

Google Analytics 4. We use Google Analytics 4 (GA4) to measure site usage and improve our service - but only if you accept the cookie consent banner. GA4 is not loaded at all until you accept; if you decline, no GA4 script, cookie, or request is sent. Once accepted, GA4 collects anonymized data such as pages visited, browser type, device type, and approximate location (city level), with IP addresses anonymized. GA4 uses cookies to distinguish unique users. You can change your choice anytime via “Cookie settings” in the footer, or opt out entirely via the Google Analytics opt-out browser add-on.

Cloudflare RUM. We use Cloudflare Real User Monitoring (RUM) for performance analytics. RUM collects page load timing, device type, and country-level location data. It does not use cookies and does not collect personal data.

PostHog. We use PostHog (EU-hosted, eu.posthog.com) for product analytics. PostHog stores an anonymous distinct ID in localStorage (not cookies) and tracks page views, session activity, and feature usage. Person profiles are created only for identified users. Data is processed on EU servers. No data is sold or shared with third parties.

API Usage. Our servers fetch live data from Vegagerðin, Vedur.is, Open-Meteo, and NOAA SWPC. We cache these responses at the edge for performance. No user-identifiable data is included in these requests.

Cookies & Local Storage. Google Analytics 4 cookies are set only after you accept the consent banner; we also use minimal Cloudflare cookies (security and performance). PostHog uses localStorage (not cookies) to store an anonymous session identifier. No cookies or local storage are used for advertising, profiling, or cross-site tracking.

Third-Party Links. Our site links to road.is, vedur.is, and other official Icelandic services. These services have their own privacy policies.

Contact. For privacy inquiries, email info@icelandroads.com.