Privacy

Pubmaterials Privacy Policy

Last updated: May 12, 2026

The overall outline of processing of your Personal Data:

1. You submit your email to request a session.
2. Email sends you details to start session.
3. Session stored securely in browser and server.
4. Session ends when the token expires or with visiting https://api.pubmaterials.org/auth/logout.
5. Logs (see “Information About Your Use of the Services We Collect Automatically.”) are cleared when Pubmaterials determines no misuse of service, has no need for them to comply with legal requirements, and/or determines logs are not needed to meet some other part of this privacy agreement.

Introduction

This Privacy Policy describes how and why Sven Voigt (doing business as Pubmaterials) (“I”, “we,” “me”, “us”, “my”, or “our”) accesses, collects, stores, uses, and/or discloses your personal information when you use the Pubmaterial services (“Services”), including when you:

• Visit the website https://pubmaterials.org or any subdomain that links to this Privacy Notice

• Email support@pubmaterials.org

• Engage with Pubmaterials in other ways

1. What Personal Data Does Pubmaterials Collect?

The categories of Personal Data collected by Pubmaterials are very minimal. We have described below which Services correlate with the processing in each Personal Data category.

Information You Provide Directly

We collect the Personal Data you provide to us, for example:

1. Account Information: When you request to log in to Pubmaterials, we collect your email to send you a session link that grants access to the Services. Pubmaterials does not maintain traditional user accounts: there is no profile, no stored preferences, and no persistent account state. Your “logged in” status is a session token stored in your browser and validated against our servers, which ends when you log out or when the session expires.

   Your email address is retained for a single purpose: to prevent misuse of the Services. If Pubmaterials identifies misuse associated with your email, that email may be used to deny future session requests. Without this retention, a banned user could simply request a new session and continue the abuse. The email is not used for marketing, profiling, analytics, or any purpose beyond abuse prevention and delivering session links you request.

2. Contact Information: The email you contact support with is stored as contact information in the event you request support.

3. Content You Provide Through Use Of The Services: When you submit information to the Services, that information gets logged and associated with your Personal data. It is used to identify technical glitches and keep an audit trail of the use of Pubmaterials services.

Information About Your Use Of The Services We Collect Automatically.

We may collect certain Personal Data automatically through your use of the Services, for example:

1. Device Information And Identifiers: When you access and use our Services, we automatically collect information about your device, which may include: device type, your device operating system, browser type and version, language preference, IP address, hardware identifiers, and mobile IDs. We may also derive your approximate location from this information, including country, city, state and postal code. This information may be collected through any use of the Services.

2. Website Usage Data: When you visit our Websites, we automatically log information about how you interact with the sites, such as the date and time of visit, the requests you submitted, and the pages you have viewed or links you have clicked.

3. Cookies And Similar Tracking Technologies (Strictly Necessary): Pubmaterials uses cookies and similar technologies to provide functionality, such as storing your session, and to recognize you as you use our Services.

4. Third-Party Integrations: The Services may contain buttons, links, tools and content from third-party services, such as LinkedIn. However, any third-party integrations’ policies and procedures are not controlled by Pubmaterials, and this Privacy Statement does not cover how third-party integrations use your information. We recommend you read the privacy statements of any third-party companies before connecting to or using their applications or services.

5. Version Data And Error Tracking: We automatically check for the version of the software you are running, along with accompanying data such as hostname, HTTP Agent, Header, and IP address. These version checks help ensure your instance is up-to-date with the latest security patches and features. We also collect error trace data and connect that data to account data so that we can diagnose and resolve technical issues.

We use a strictly necessary cookie to maintain your session/authenticate you while using our Services. This cookie is essential for the service to function and is automatically set when you [sign in / submit a form / etc.]. It contains no personally identifiable information beyond a session identifier and is automatically deleted when [you log out / your session expires].

2. What Personal Data Is Not Collected By Pubmaterials?

Pubmaterials does not store personal account information beyond the email. Email is used explicitly to prevent misuse of the platform and is used to start a session for that user. The email used to start a session is logged by Pubmaterials and may be used to restrict access to the service in the future if misuse is identified. The session token is the unique identifier for a user of an email and it never gets associated with any information beyond usage statistics.

We do not collect Personal Data related to race, ethnicity, political opinions, religion, trade union membership, genetic data, biometric data, health data and sexual orientation.

Additionally, California law requires reporting on web browser DNT signals. Because there currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time. However, Pubmaterials does not implement tracking beyond your session, which is securely stored in your browser and our servers.

Because Pubmaterials does not sell personal information or share personal information for targeted advertising, there is no opt-out preference signal (such as Global Privacy Control) that would apply to our processing. If our practices change in the future, we will honor applicable opt-out signals as required by law.

Further, Pubmaterials does not knowingly collect Personal Data from, or direct any of our Services to, children under the age of 13. If we learn or have reason to believe that a user is under 13, we will promptly close that account and delete associated Personal Data in accordance with applicable law. By using the Services, you represent that you are at least 13 or the equivalent age as specified by law in your jurisdiction or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If you become aware of any data we may have collected from children under age 13 or the equivalent age as specified by law in your jurisdiction, please contact us at support@pubmaterials.org.

3. How Pubmaterials Uses Personal Data And Our Legal Basis For Processing

Pubmaterials collects and processes each category of Personal Data for the purposes listed in the tables below.
When our processing is subject to international laws, including but not limited to the General Data Protection Regulation (“GDPR”) that governs individuals located in the European Economic Area (“EEA”), we have attributed one of the legal bases enumerated under the GDPR to the “Purpose of Processing” activity. To the extent a jurisdiction allows for different legal bases than those enumerated under GDPR, we will apply only those appropriate legal bases to the purposes of processing as required under applicable law.

Performance Of A Contract:

We use your Personal Data to provide the Services you have requested. The purposes of processing and the categories of information used under this lawful basis are described below:

Purpose of Processing	Personal Data Category
To create your Account and authenticate your access to the Services and provide you with the Services you have requested	Contact Information Account Information Content You Provide Through Use Of The Services
To conduct user research and development	Contact Information Website Usage Data
To respond to your requests for customer support	Content You Provide Through Use Of The Services Contact Information

Compliance with a Legal Obligation:

We may use your Personal Data in connection with legal claims, regulatory compliance, and audits. The purposes of processing and the categories of information used under this lawful basis are described below:

Purpose of Processing	Personal Data Category
To create your account, identify and authenticate your access to the Services and provide you with the Services you have requested	Device Information and Identifiers Contact Information Account Information Content You Provide Through Use Of The Services Third-Party Integrations
To detect, prevent, or otherwise address fraud and abuse to protect you, Pubmaterials, and third-parties	Contact Information Account Information Content You Provide Through Use Of The Services Device Information and Identifiers Cookies And Similar Tracking Technologies (Strictly Necessary) Version Data And Error Tracking
To comply with our legal obligations, including export, privacy and security regulations	Contact Information Account Information Content You Provide Through Use Of The Services Device Information and Identifiers
To protect the rights, safety and property of Pubmaterials, you, or any third-party	Contact Information Account Information Content You Provide Through Use Of The Services Device Information and Identifiers Cookies And Similar Tracking Technologies (Strictly Necessary) Version Data And Error Tracking

Legitimate Interests:

We rely on our legitimate interests or the legitimate interests of a third-party, such as our users, where they are not outweighed by your interests or fundamental rights and freedoms. You may object to the processing of your Personal Data for these purposes at any time. The purposes of processing and the categories of information used under this lawful basis are described below:

Purpose of Processing	Personal Data Category
To understand how our Services are used and to improve our Services	Content You Provide Through Use Of The Services Version Data and Error Tracking
To administer and maintain our Websites	Website Usage Data Cookies and Similar Tracking Technologies (strictly necessary)
To send you information you have requested, such as information requested through support email	Contact Information Website Usage Data

4. With Whom Does Pubmaterials Share Your Personal Data?

We do not sell personal information, and we do not share personal information for targeted advertising. We may disclose your data to third-party vendors, service providers, contractors, or agents (“third parties”) who perform services for us or on our behalf and require access to such information to do that work. Third-party integrations’ policies and procedures are not controlled by Pubmaterials, and this Privacy Statement does not cover how third-party integrations use your information. We provide the links to the providers websites and recommend you read the privacy statements of any third-party companies before submitting your email for a Pubmaterials session.

The third parties we may share personal information with are as follows:

Pubmaterials Servers: Vultr

Email Delivery Platform: Resend

Domain Name Registration: Porkbun

Website Hosting: GitHub and GitHub Pages

Support Email (Outlook): Microsoft

5. Sharing Personal Data Across National Borders

Regardless of your location, please be aware that your information may be transferred to, stored by, and processed by us in our facilities and in the facilities of the third parties with whom we may share your personal information (see “With Whom Does Pubmaterials Share Your Personal Data?” above), including facilities in the United States, and other countries.

If you are a resident in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. However, we will take all necessary measures to protect your personal information in accordance with this Privacy Notice and applicable law.

European Commission’s Standard Contractual Clauses:

We have implemented measures to protect your personal information, including by using the European Commission’s Standard Contractual Clauses for transfers of personal information between our group companies and between us and our third-party providers. These clauses require all recipients to protect all personal information that they process originating from the EEA or UK in accordance with European data protection laws and regulations. Our Standard Contractual Clauses can be provided upon request. We have implemented similar appropriate safeguards with our third-party service providers and partners and further details can be provided upon request.

6. Misuse Of The Services

Pubmaterials reserves the right to deny session requests from any email address that has been associated with misuse of the Services. Misuse includes, but is not limited to:

• Automated access using scripts, bots, or scrapers without authorization
• Attempts to circumvent security measures, rate limits, or access controls
• Submission of malicious content, including malware, exploits, or phishing attempts
• Use of the Services in violation of applicable law
• Excessive request volume that impairs service availability for other users
• Activity that exposes Pubmaterials or its users to legal liability or security risk

Determination of misuse is at Pubmaterials’ discretion. If your email has been flagged for misuse, future session requests from that email may be denied.

7. How Does Pubmaterials Secure Your Personal Data?

Pubmaterials implements appropriate technical and organizational security measures for protecting the security of Personal Data. All infrastructure is security hardened by infrastructure management and configuration management tools that ensure baseline configuration standards have been established for production servers. Communication over email is managed by third parties (see “With Whom Does Pubmaterials Share Your Personal Data?” above) and your email service provider. Review their policies and ensure you are comfortable with their data management practices.

Except to host the Services, Personal Data will not be processed except to: maintain security or to remediate a security incident; to scan for malware and vulnerabilities that violate the Website Terms of Use; to comply with our legal obligations; to ensure the availability of the Services; to provide support to a repository owner upon request; or on the basis of your consent.

8. Data Retention

In order to protect your Personal Data, Pubmaterials will only retain your Personal Data for as long as your account is active or as needed to perform our contractual obligations, provide you the Services, comply with legal obligations, resolve disputes, preserve legal rights, or enforce our agreements.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

9. What Are Your Rights And Choices Regarding Personal Data?

Providing your email is required to use the Services; you may decline but cannot use the Services without it.

You have the right to access, correct, restrict, or delete your Personal Data (data portability is not applicable). While these rights may vary by jurisdiction, Pubmaterials provides you with the same rights and choices, no matter where you live. We provide these rights free of charge. Pubmaterials reserves the right to decline data subject rights requests that are manifestly unfounded, repetitive, or abusive in nature, or where fulfilling the request would conflict with our legitimate interests in enforcing our terms, policies, or legal rights, including where an account has been suspended or terminated for violation of our terms or other applicable policies.

You may exercise your choices and rights as follows:

Request a copy of your information: You may request a copy of the Personal Data stored on our servers by emailing support@pubmaterials.org.

Update your information: If you already have an account, you may change your logged in status to logged in by resubmitting your email or you may log out by visiting https://api.pubmaterials.org/auth/logout.

To delete your account: If you want to delete your account, you may do so by emailing support@pubmaterials.org. Note that Pubmaterials only keeps logs beyond your session that can be ended by logging out. The logs may be necessary to perform our legal duties and prevent misuse of the service. In such a case, the account information may not be deleted.

To inform your Supervisory Authority: In the unlikely event you disagree with our handling of your request, you have the right to file a complaint with the competent supervisory authority in your jurisdiction, such as:

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority.

If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Appeals: If you are located in a state or country where you are granted the right to appeal our resolution of a data subject rights request, we will provide the specific information on how to appeal in our initial resolution email to your request.

10. U.S. State Privacy Rights

This Privacy Statement applies to residents of all US States, including those with State specific privacy laws. However, this section describes supplemental information if you are a California resident or reside in a US State that requires supplemental privacy disclosures regarding privacy rights and collection practices.

Category	Purpose Of Use	Collected
A. Identifiers	Email identifies a user.	YES
B. Personal information as defined in the California Customer Records statute	Email is for support issues.	YES
C. Protected classification characteristics under state or federal law		NO
D. Commercial information		NO
E. Biometric information		NO
F. Internet or other similar network activity	Identifying how Services are used and potential misuse.	YES
G. Geolocation data	Automatically inferred by third parties.	YES
H. Audio, electronic, sensory, or similar information		NO
I. Professional or employment-related information		NO
J. Education Information		NO
K. Inferences drawn from collected personal information	Patterns of misuse.	YES
L. Sensitive personal Information		NO

California Privacy Rights

You are entitled to certain rights as a California resident, which include:

• Right to Know what Personal Data (in addition this Privacy Policy) we process
• Right to access your Personal Data
• Right to request the deletion of your Personal Data
• Right to correct your Personal Data
• Right to non-discrimination if you exercise your rights
• Right to obtain a copy of data shared by you with us
• Right to know whether your Personal Data is sold or shared and to opt-out of the sale of your Personal Information
• Right to know whether your Personal Data is used for targeted advertising and opt-out if applicable.
• You may exercise all other California rights as described in the “What Are Your Rights And Choices Regarding Personal Data?”
• You have the right to receive notice of our privacy practices at or before the point where your Personal Information is collected
• You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under California law. Upon receiving your request, we will require the agent to provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. To provide or delete specific pieces of Personal Information we will need to verify your identity to the degree of certainty required by law.

Virginia

Effective 1 January 2023

This notice is provided under the Virginia Consumer Data Protection Act (“VCDPA”) and explains the privacy rights of Virginia residents. It also provides certain mandated disclosures about our treatment of Virginia residents’ Personal Data.

• For categories of the Personal Data collected see the “What Personal Data Does Pubmaterials Collect?” section of this Privacy Policy.

• For purpose of processing Personal Data see the “How Pubmaterials Uses Personal Data And Our Legal Basis For Processing” section of this Privacy Policy.

• For disclosure of Personal Data see the “With Whom Does Pubmaterials Share Your Personal Data?” section of this Privacy Policy.

Additional Virginia Resident Rights:

• Right to access your Personal Data
• Right to know whether your Personal Data is being processed
• Right to correct inaccuracies in Personal Data
• Right to delete Personal Data
• Right of data portability
• Right to opt out from targeted advertising
• Right to opt out from the sale of Personal Data

11. Automated Decision Making

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.

However, Pubmaterials uses automated systems for security purposes, including a web application firewall that may automatically block, rate-limit, or challenge requests that appear malicious or abusive. These automated security measures do not make decisions that produce legal or similarly significant effects on you. Pubmaterials does not engage in automated decision-making or profiling that produces legal or similarly significant effects within the meaning of GDPR Article 22 or comparable US state law provisions.

12. Statement Changes

We may change this Privacy Policy from time to time. When we do, we will update the “Revised” date at the top of this Policy. If we decide to make a significant change to this Privacy Policy, we may post a notice of the update on https://pubmaterials.org and/or provide notification via email to inform you of how we protect your Personal Data.

13. Contact Us

If you have questions or comments about this notice, you may email us at support@pubmaterials.org