ScriptaHub · working draft

Privacy notice

How ScriptaHub handles visitor information and preferences.

1. Status and controller

Working draft. Before publication, replace every bracketed field with verified operator and hosting details and obtain review for the operator’s actual establishment and audience.

Controller: [LEGAL NAME OF OPERATOR]
Address: [REGISTERED ADDRESS, COUNTRY]
Privacy contact: [PRIVACY EMAIL]
EU or Swiss representative: [IF REQUIRED]

2. Information processed

The AI Librarian compares a question with the catalogue on the visitor’s device. The question is stored in the URL fragment, which browsers do not send to the web server as part of the page request.

Site deliveryThe hosting provider may process IP address, request time, requested path, user agent and security logs to deliver and protect the site. Complete the provider, location and retention period: [HOSTING PROVIDER / COUNTRIES / RETENTION].

Local preferencesLanguage, light or dark theme and text size are stored in localStorage after the visitor chooses them. They stay on that device until removed in browser settings.

AI LibrarianQuestions and ranking calculations remain on the device. No question is submitted to ScriptaHub by the recommendation feature itself.

Optional dictationIf a visitor activates dictation, the browser’s speech-recognition service processes microphone input under the browser provider’s terms. ScriptaHub does not receive the audio.

Email proposals, feedback and translation requestsForms open the visitor’s email application. If the visitor sends the message, names, contact details, attachments and message content are processed by the sender’s and recipient’s email providers and by ScriptaHub to answer and evaluate the submission. Proposed retention: [PERIOD].

Reader analyticsThe online reader loads Umami Cloud. Umami documents that its standard tracker uses no cookies and records anonymised traffic metrics such as page views, referrer, browser, operating system, device type and country. Confirm account region, retention, contract and any custom-event configuration: [DETAILS].

3. Purposes and legal bases

Proposed purposes are delivering and securing the site, remembering requested interface preferences, answering messages, assessing contributions and understanding aggregate reader use. For visitors in the EEA, record the applicable GDPR legal basis for each purpose, normally performance of a requested service, legitimate interests, consent where required, or steps requested before a contract. For Swiss visitors, processing must follow the principles and information duties of the Federal Act on Data Protection. Complete the operator’s balancing tests and records before relying on legitimate interests.

4. Recipients and international transfers

Potential recipients are [HOSTING PROVIDER], Umami Cloud, the operator’s email provider and technical advisers who need access. List every processor, processing country and transfer safeguard. Where data leaves the EEA or Switzerland, identify the destination and the applicable adequacy decision, contractual safeguard or exception.

5. Retention and security

Keep personal data only as long as needed for the stated purpose, legal duties and the handling of disputes. Insert concrete periods for server logs, email correspondence, accepted contributions and backups. Use access control, updates, backups and incident procedures appropriate to the risk.

6. Your rights

Depending on the applicable law, a person may request access, correction, deletion, restriction, portability or an objection, and may withdraw consent for future processing. Requests go to [PRIVACY EMAIL]. EEA visitors may complain to their local supervisory authority; Romanian visitors can contact ANSPDCP. Swiss visitors can contact the Federal Data Protection and Information Commissioner.

7. Children and changes

[STATE THE INTENDED AGE GROUP AND PARENTAL-CONSENT PROCESS.] Material changes should be dated and explained here. Last draft update: 3 September 2026.

Official references

EU General Data Protection Regulation · Swiss FDPIC guidance on website privacy statements · Romanian data protection authority · Umami documentation