Privacy policy

Data controller

Antoine Olivier, publisher of DiscoverIA. Contact: [email protected].

Email newsletter

• Data: your email address and the newsletter language.
• Purpose: sending you the DiscoverIA newsletter (status changes and the feed).
• Legal basis: your consent (GDPR Article 6(1)(a)), given with the checkbox and confirmed through the link sent by email. Nothing is recorded before that click.
• Recipient: Brevo, SAS, 106 boulevard Haussmann, 75008 Paris, France, which handles the mailings for DiscoverIA.
• Retention: until you unsubscribe, which you can do at any time with the link in every mailing.
• Your opens and clicks are not tracked individually. Brevo only records the date you last opened a mailing, for deliverability; other opens and clicks are counted without being linked to your address.

Report form

• Data: the report type, the record and page concerned, the language, your message and, if you want a reply, your email address.
• Purpose: correcting or completing the registry and replying to you.
• Legal basis: DiscoverIA's legitimate interest in keeping an accurate registry (GDPR Article 6(1)(f)). The email address is optional.
• Recipients: the message goes through a Cloudflare service and is then stored in a private, unpublished GitHub repository.
• Retention: the email address is deleted after the reply, and at the latest 12 months after sending. The message is kept as long as it documents a correction to a record.

Bot protection

The forms are protected by Cloudflare Turnstile, which analyses the IP address, the encrypted connection (TLS) fingerprint and the browser identifier to tell a human from a bot. Legal basis: legitimate interest in protecting the forms against automated submissions (GDPR Article 6(1)(f)). DiscoverIA does not keep this data; Cloudflare processes it under its privacy policy, and also on its own behalf to improve bot detection.

Hosting and analytics

Cloudflare, the site's host, processes visitors' IP addresses to deliver and secure the pages. DiscoverIA does not keep these logs; their retention follows Cloudflare's policy.

Traffic is measured with Cloudflare Web Analytics, which uses no cookies or local storage and does not track individual visitors. Legal basis: legitimate interest in knowing the site's audience (GDPR Article 6(1)(f)).

The site sets no advertising or audience-measurement cookies. Turnstile may use the technical cookies described in Cloudflare's policy.

Transfers outside the European Union

Cloudflare, Inc. and GitHub, Inc. are based in the United States. Both companies are certified under the EU-U.S. Data Privacy Framework, which governs these transfers. Brevo states that it hosts its data in the European Union.

People cited in the registry

DiscoverIA cites the people who published or claimed a result tracked by the registry: authors of papers, contributors named by a source, spokespeople for a lab.

• Data: the name or pseudonym as published, the role, the claimed result, the dates and the link to the source.
• Source: the public publications and pages cited on each record (papers, preprints, code repositories, wikis, announcements).
• Purpose: informing the public about the state of advances, with their sources and dates.
• Legal basis: legitimate interest in informing the public (GDPR Article 6(1)(f)).
• Retention: as long as the entry remains in the registry, status history included.

When a contribution is classified as withdrawn, the record does not show the person's name, at most their role, and keeps the link to the source.

These people are not notified one by one, which would take a disproportionate effort for information that is already public (GDPR Article 14(5)(b)): this page serves as their information.

You can object to this processing (GDPR Article 21) or ask for a correction with the report form or at [email protected]. An objection is weighed against the public's interest in knowing the source of a result.

Your rights

You can ask for access to your data, its rectification or erasure, restriction of processing or portability, object to processing based on legitimate interest, and withdraw your consent at any time. Write to [email protected]; you will receive an answer within one month.

You can also lodge a complaint with the French data protection authority (CNIL).