Privacy policy
This policy explains what personal data Silytics collects when you use silytics.si, why we collect it, who receives it and what rights you have.
1. Who is responsible
Silytics (“we”, “us”) is the controller of the personal data described here. Contact: [email protected].
2. What we collect and why
| Data | Why we use it | Legal basis (EU/UK GDPR) |
|---|---|---|
| Contact form and email: your name, email address, message, and any details you choose to send | To read and answer your message and keep a record of the correspondence | Legitimate interests (running the service and replying to you); your request |
| Technical data: IP address, browser and device type, pages requested, time and referrer, held in server and security logs and by our network provider | To deliver the Site, keep it secure, detect abuse and fix faults | Legitimate interests (security and reliability) |
| Search terms you enter in the Site's search or filters | To return results. The terms are sent from our servers to the data sources (arXiv, Hugging Face, GitHub) to fetch matching public entries. We do not send your IP address to them from the search request and we do not build a profile of your searches | Legitimate interests (providing the feature you requested) |
| Account data (if you create an account): email address (if used), display name, linked sign-in methods (a Google account identifier and email, or a public wallet address), plan, saved entries, API key names and usage counts, connected apps, sign-in times, IP address and browser type of sessions | To create and secure your account, let you sign in, provide the API and MCP server within your plan limits, take payment for paid plans, and prevent abuse | Contract (providing the account and services you asked for); legitimate interests (security and abuse prevention) |
| Newsletter and alerts (when offered): your email address and your preferences | To send what you asked for | Consent, which you can withdraw at any time |
We do not use advertising or analytics trackers on the Site at the time of writing. If that changes, we will update this policy and, where required, ask for your consent first.
3. Information about people in public sources
The Site shows public metadata that may include names of authors, organizations and developers (for example paper authors and repository owners) taken from arXiv, Hugging Face, GitHub and similar sources, with a link to the original. We process it on the basis of legitimate interests in providing a discovery service. If you are named in an entry and want it corrected or removed, contact us and we will review your request.
4. Who receives data
We use service providers who process data on our behalf under contract:
- Cloudflare for DNS, security, content delivery, the Turnstile spam check on our forms, and inbound email routing.
- Resend for sending email.
- Google, only if you choose “Continue with Google”: Google tells us your account identifier, name and email address. Wallet sign-in uses only a signature made in your own wallet and reads your public address; it sends no transaction.
- Our hosting provider for the servers that run the Site.
- Data sources (arXiv, Hugging Face, GitHub), which receive the search terms described above. Some pages also load avatar images from GitHub's servers, which therefore receive your IP address.
We do not sell personal data. We may disclose data where the law requires it or to protect our rights, our users or the security of the Site.
5. International transfers
Some providers are located outside your country, including in the United States. Where required, transfers rely on safeguards such as the European Commission's standard contractual clauses or an adequacy decision.
6. How long we keep data
- Contact messages and our replies: up to 24 months after the last message, unless needed longer to resolve a dispute or meet a legal duty.
- Security and server logs: up to 90 days.
- Account data: until you delete your account (you can do this yourself in your account page), then removed, except payment records we must keep for accounting and tax, which are kept without your sign-in details. Sign-in sessions expire after 30 days. One-time sign-in codes are deleted within a day.
- API usage counts: up to 14 days at the level of individual days per account; aggregated afterwards.
- Newsletter data (when offered): until you unsubscribe, plus a minimal record that you did so.
7. Your rights
Depending on where you live, you may have the right to access your data, have it corrected or erased, restrict or object to processing, receive a portable copy, and withdraw consent at any time. You can also lodge a complaint with your local data-protection authority. To exercise a right, write to [email protected]. We may need to verify your identity first and will respond within the time the law requires.
8. Security
We use technical and organizational measures appropriate to the risk, including encrypted connections, access controls with two-factor authentication for administrators, and limited retention. No system is perfectly secure, so please do not send sensitive information through the contact form.
9. Digital-asset and wallet data
You may choose to sign in or link a wallet by signing a message. This reveals your public wallet address to us and nothing else, and never triggers a transaction. The Site never asks for seed phrases or private keys. Blockchain data is public by nature; we may display public on-chain information about the SLTX token and the project's own wallets.
10. Children
The Site is not directed at children under 16, and we do not knowingly collect their personal data.
11. Your responsibilities
Please provide accurate information and do not send us other people's personal data without their authority, or special-category data, financial credentials or secrets. You are responsible for the content you submit. Links to third-party sites and services are governed by those parties' own policies, for which we are not responsible.
12. Relationship to other documents
This policy forms part of, and should be read with, our Terms of use, which include our disclaimers and limitations of liability. Nothing in this policy limits any right you have under mandatory data-protection law.
13. Changes
We may update this policy at any time by publishing the revised version with a new date, which applies from publication. For significant changes we will give a clearer notice on the Site.