Privacy Policy

Who we are

Varysian is a specialist organisation working across the global weather, water and climate community. Our public website is varysian.com.

If you have questions about this Privacy Policy, or about information Varysian holds about you, contact us at info@varysian.com.

This is an operational baseline policy. It may be refined as Varysian's activities and services develop.

Information we may collect

We collect only what is needed to run this website and respond to enquiries.

Information you send us

• Contact enquiries. When you use the contact form on our website or email us, we collect your name, email address, any organisation you provide, an enquiry type, your message and the page you sent the enquiry from.
• Network accounts. If you create a Varysian Network account, we collect the information needed to run your account and profile — for example your name, email and any profile information you choose to add.
• Correspondence. When you email or otherwise correspond with us, we keep those messages.

Technical information generated when you visit

• A random visitor identifier stored in your browser's local storage, so we can group anonymous page views by visit rather than by identifiable person. This identifier does not carry your name, email or contact details.
• Standard technical information such as your IP address, browser user-agent and the pages you visit. When you send an enquiry, we also record the IP and user-agent alongside the submission for basic anti-abuse purposes.
• If you sign in to Varysian Network, standard authentication session information is stored so we can keep you signed in.

We do not currently use third-party advertising cookies, cross-site trackers, or behavioural-advertising tags on this website. The only third-party measurement tag loaded on the public website is Google Analytics 4, loaded under Google Advanced Consent Mode v2 with `analytics_storage` denied by default (see "Analytics" below for the full behaviour, including the cookieless pings sent while denied and how to change your consent choice via the footer "Cookie settings" control).

How information is used

We use the information described above to:

• respond to enquiries you send us
• provide and administer Varysian Network and related member services
• operate the website and understand which parts of it are used
• prevent abuse and keep the site secure
• comply with legal or regulatory requirements that apply to us
• deliver services or communications you have specifically requested.

We do not sell your personal information as a commercial data product.

Contact-form information

When you use the contact form, your submission is stored in a secure database used only by Varysian. Access is limited to authorised Varysian team members. We record basic technical information (your IP address and browser user-agent) so we can detect abuse and rate-limit repeated submissions. We keep enquiries for as long as we reasonably need them to respond to you and to maintain a working record of the correspondence.

Analytics

We use a simple internal analytics store to record aggregate page views and CTA clicks on the public website. It uses a random identifier held in your browser's local storage — not a cookie. It does not carry your name, email or contact details, and it is not shared with third-party ad networks. We use this data to understand which parts of the site are useful and to improve them.

We also use Google Analytics 4 (GA4) on the public website to measure aggregate traffic. GA4 is loaded under Google Consent Mode v2 with `analyticsstorage` denied by default — the same denied state is applied before Google's own gtag script finishes loading, so no GA analytics cookies (`ga`, `ga*`) are placed in your browser until you choose "Accept analytics" on the consent banner shown on your first visit.

While `analytics_storage` is denied, GA4 still sends small cookieless measurement pings to Google containing non-identifying information such as the event name, timestamp and consent state. These pings do not set cookies, do not include a GA client ID and do not include a persistent user ID. We treat this as being honest about what Advanced Consent Mode does — nothing is sent to Google on invitation-token, authentication, admin or onboarding URLs because those paths are blocked from the GA event stream before any ping is produced; detail-record UUIDs on other paths are replaced with `/[id]` so no record ID reaches GA.

If you choose "Accept analytics", we flip `analytics_storage` to granted. GA4 may then set its measurement cookies and record standard events (such as page views). You can change your mind at any time using the "Cookie settings" link in the site footer:

• Switching back to Decline immediately flips `analyticsstorage` back to denied, stops full GA measurement, and clears any `ga` / `ga*` cookies previously set on `www.varysian.com`.
• Switching from Decline to Accept re-enables full GA measurement from that point onwards.
• Opening the Cookie settings control alone does not change your current choice — it only lets you view and update it.

We do not send your name, email address, message content, authentication tokens, invitation tokens or private member URLs to Google Analytics. Session cookies required to keep you signed in to Varysian Network are separate from analytics cookies and are not affected by the Cookie settings control.

Third-party services

• Hosting. The website is hosted on Vercel. Standard server logs generated by Vercel may include IP addresses and request metadata.
• Data storage. Data submitted to Varysian (including contact enquiries and Network account information) is stored using Supabase, an infrastructure provider Varysian uses on our behalf.
• Email. Enquiries you send us and correspondence from us are handled through the email systems we use for business communications.
• External content. Some pages on this website link out to third-party services such as YouTube or Simplebooklet, where certain Varysian publications and interviews are hosted. When you follow such a link or view embedded content, that provider's own privacy notice applies to how they process any information about you.
• Analytics. Google Analytics 4 is used for aggregate measurement of the public website, loaded under Google Consent Mode. See the "Analytics" section above for details and Google's own privacy policy for how Google processes the pings it receives.

We do not maintain a broad list of processors here — we describe only the services genuinely used to run the current public website.

Sharing

We do not sell personal information as a data product.

We may share information with:

• Service providers who host, store or transmit information on our behalf (for example the hosting, database and email providers listed above), only to the extent needed to run the website and respond to you.
• Professional advisers, auditors or authorities where we are required to by law or where it is reasonably necessary to protect our rights or the rights of others.

Retention

We keep information only for as long as reasonably necessary for the purpose it was collected — for example, to respond to your enquiry, run your Network account, keep a working record of correspondence, or comply with our legal and business requirements. When you close a Network account we will retain limited information as needed for those purposes.

Security

We take reasonable steps to protect information from unauthorised access, alteration or disclosure. No system is ever completely secure — if you believe your account or your correspondence has been compromised, contact us at info@varysian.com as soon as you can.

Your rights

Depending on where you are, you may have rights over the information we hold about you — including rights to request access, correction or deletion, to object to certain uses, or to complain to a data-protection authority. To exercise any of these rights, email us at info@varysian.com and we will respond as soon as we reasonably can.

Children

This website is aimed at professional use in the weather, water and climate sector. It is not directed at children and we do not knowingly collect information from children.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes we will note that clearly at the top of the page.

Contact

Questions about this Privacy Policy, or about information Varysian holds about you: info@varysian.com.

Last updated

17 September 2026.