Information Privacy Policy
SciTrack is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, and how we safeguard it. It applies to all users of the SciTrack platform.
Personal Data We Collect
We collect only the data necessary to provide our research-management services. The categories below describe the personal data we may process:
Lawful Bases for Processing
Where applicable data-protection law requires a legal basis, we rely on the following:
| Lawful Basis | Applies To |
|---|---|
| Contract performance | Providing the SciTrack platform, account creation, managing research workflows, and delivering customer support. |
| Legitimate interest | Improving platform security, preventing fraud, generating aggregated analytics, and enhancing user experience. |
| Consent | Sending optional marketing communications, enabling public profiles, and non-essential cookies or analytics. |
| Legal obligation | Complying with applicable laws, responding to lawful requests from authorities, and maintaining audit records. |
How We Use Your Data
Your personal data is used exclusively for the following purposes:
- Platform Delivery — To create and maintain your account, authenticate sessions, and provide access to your research workspace (ideas, protocols, projects, tasks, notes, manuscripts, and submissions).
- Communication — To send transactional emails (verification, password resets, notification digests), respond to support requests, and facilitate in-app messaging between team members.
- Platform Improvement — To analyse anonymised usage patterns, diagnose bugs, and improve the functionality and performance of SciTrack.
- Security — To detect and prevent fraudulent or unauthorised access, enforce our terms of service, and maintain platform integrity (e.g., CSRF protection, IP-based rate limiting).
- Legal Compliance — To comply with applicable regulations and respond to lawful data-access requests.
We do not sell your personal data, and we do not use it for automated decision-making or profiling.
Data Sharing & Third Parties
SciTrack is private by default. Your research content is never shared publicly unless you explicitly choose to make specific items public. We may share limited data with the following categories of recipients:
- Infrastructure Providers — Hosting (cPanel/server provider), email delivery services (e.g., Mailtrap for transactional emails). These providers act as data processors under contractual obligations.
- Legal Authorities — If required by applicable law, subpoena, court order, or to protect the rights, safety, and property of SciTrack and its users.
- You — Public profile data (name, bio, affiliations, Google Scholar link) is displayed only if you opt in to a public researcher profile.
We do not share your data with advertisers, data brokers, or any unrelated third parties.
Data Storage & Security
We implement industry-standard technical and organisational measures to protect your data:
While no system can guarantee absolute security, we are committed to maintaining the highest practical standard of data protection.
Retention & Deletion
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law.
| Data Category | Retention Period |
|---|---|
| Account data | Until you delete your account or request erasure |
| Research content | Until you delete the content or your account |
| Messages & communications | Until deleted by you or upon account deletion |
| Server & access logs | Up to 90 days (automatically purged) |
| Support tickets | Up to 2 years after resolution |
| Audit logs | Up to 1 year |
Upon account deletion, we remove or anonymise your personal data within 30 days, except where retention is legally required.
Cookies & Analytics
SciTrack uses a minimal set of cookies necessary for the platform to function. We do not use third-party advertising cookies.
| Cookie / Technology | Purpose | Duration |
|---|---|---|
PHPSESSID |
Session management and authentication | Session (browser close) |
_csrf |
Cross-site request forgery protection | Session |
remember_me |
Persistent login (if opted in) | 30 days |
| Anonymous visitor hash | Deduplicating public-profile views per day | 24 hours |
We do not integrate third-party analytics services (e.g., Google Analytics) at this time. If this changes, we will update this policy and notify users accordingly.
Your Rights & Choices
Depending on your jurisdiction, you may have the following rights regarding your personal data:
To exercise any of these rights, please contact us at admin@scitrack.net or use the Contact page. We will respond within 30 days.
International Data Transfers
SciTrack's servers are located in the hosting region associated with our infrastructure provider. If you access SciTrack from outside this region, your data may be transferred to and stored in that region.
Where we transfer personal data internationally, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by relevant data-protection authorities.
- Ensuring the receiving jurisdiction provides an adequate level of data protection.
- Contractual obligations with processors to maintain equivalent security standards.
Children's Privacy
SciTrack is designed for professional researchers, academics, and adult users. We do not knowingly collect personal data from children under the age of 16 (or the applicable minimum age in your jurisdiction).
If we become aware that we have inadvertently collected data from a child, we will promptly delete such data and terminate the associated account. If you believe a child has provided us with personal data, please contact us at admin@scitrack.net.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes:
- We will update the "Last updated" date at the top of this page.
- For significant changes, we will notify registered users via email or an in-app notification.
- Continued use of SciTrack after an update constitutes acceptance of the revised policy.
We encourage you to review this page periodically to stay informed.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out: