Privacy

Sanctions Evasion Reference. (2026, September 19). Privacy. https://sanctionsevasion.org/privacy/

Sanctions Evasion Reference. “Privacy.” Last reviewed September 19, 2026. https://sanctionsevasion.org/privacy/.

@misc{ser-privacy,
  author = {{Sanctions Evasion Reference}},
  title  = {Privacy},
  year   = {2026},
  note   = {Last reviewed 2026-09-19},
  url    = {https://sanctionsevasion.org/privacy/}
}

What is not collected, regardless of advertising or analytics

• No accounts, no logins, no comments, no forms, no newsletter.
• This site's own code sets no cookies and runs no tracking of its own; everything below is a named third party, not this site.
• No third-party fonts. Fonts are served from this domain, which is why reading a page never asks a font provider for anything.
• No fingerprinting, no session recording, no A/B testing run by this site.

Analytics

This site runs Google Analytics (GA4) to see which pages are read. If you accept it, it sets cookies in your browser on this domain and sends Google an anonymised-IP record of the page you viewed, your rough location, device and browser type, and how you arrived. Google's own privacy policy and policy on data used by partner sites describe what it does with that beyond this site.

It asks before it sets anything. A dialog on your first visit offers “Accept required” and “Accept all”, given equal weight; “Accept required” gives you the whole site, which is identical whichever you pick. Until you choose “Accept all”, Google Analytics runs in Google's Consent Mode v2 with every storage type denied: it sets no cookie, keeps no persistent identifier for you, and receives only anonymised, cookieless page-view pings. If you accept, it sets first-party cookies, _ga and ones beginning _ga_ (Google may add one for each of its measurement containers), and tells your visits apart by a random identifier; Google then processes that measurement data under its own terms. A Global Privacy Control signal from your browser is treated as a refusal, and you are not asked. “Cookie choices” in the footer reopens the choice at any time; declining or withdrawing there stops new cookies and removes the ones already set.

Advertising: built for it, not running it yet

This site's codebase is wired for Google AdSense, gated behind a single configuration flag that is currently off. Until that flag is switched on, no ad code loads, no ad-related cookie is set, and nothing about a visit is shared with Google or any other advertiser.

When it is switched on, this paragraph is replaced by a full description of what AdSense collects, why, and how to control it, including the consent dialog every visitor will see. That is not a promise about tone: it is what the code that generates this page actually does, and this page cannot say "no advertising" once the flag is true.

What does happen regardless

The site is served as static files from Cloudflare's network. Cloudflare processes the request in order to deliver the page, which necessarily involves handling your IP address, and keeps aggregate logs for operational and security purposes as any host does.

Links out

This site links heavily to primary sources — Treasury, FATF, the UN, court records. Those sites have their own privacy practices and this page says nothing about them. Following a citation is a visit to someone else's site.

In short

This is a reference site made of static HTML. There is no account, no profile and no data about you that this site itself gathers, stores, or could hand over if asked. What Google Analytics collects, described above, is governed by Google's policies, not this site's, and it sets no cookie unless you choose "Accept all". AdSense is built but not switched on yet.