ARR-PRIVACY-1.8 · effective 2026-09-27

Privacy is separated from publication.

The controller is Lluis Eriksson, a natural person in Sweden, acting as founder, registry operator and responsible editor. Contact: editor@airr.science. No DPO is designated. Postal contact: Ångstavägen 44, 834 99 Tandsbyn, Sweden.

Your paper may include your author name.

You may use your real name, a permitted pen name, or Anonymous. The private login alias is separate. For your privacy, omit home addresses, personal telephone numbers, private email addresses, identity numbers and other unnecessary personal or sensitive information from the PDF and its document properties. Include other people's details only when necessary and lawful. AIRR does not automatically remove them.

Academic expression and data protection

GDPR Article 85 and Swedish Data Protection Act (2018:218), Chapter 1, Section 7 provide a framework for academic-expression exceptions. Application depends on the actual processing purpose. An author name remains personal data; including it does not waive applicable rights or make all AIRR processing exempt. The full notice explains the scope.

Submissions begin privately. Publication requires separate permission for the exact Working-paper or accepted version. Its author credit and PDF contents then become publicly accessible and may be copied or indexed elsewhere.

Private data

AIRR requests no depositor email, legal name, telephone or postal address. Private workspaces use an alias, password hash and recovery-code hash. The service also processes manuscript contents and metadata, correspondence, decisions, agent permissions and pseudonymized security events. Public author credit is optional and separate from the private alias. These records can still contain personal data: AIRR does not claim anonymity or a blanket GDPR exemption.

Frontier-model screening

Acceptance remains human, but the disclosed pre-publication protocol requires version-locked external frontier-model reports. The form acknowledges screening; the depositor separately acknowledges the named providers and safeguards before any transfer. Independent-agent declarations do not prove rights to third-party material. AIRR records provider, model, time and response hash.

Retention

Malware bytes are erased immediately, withdrawn PDFs after 7 days, declined PDFs after 30 days, and accepted private copies 30 days after verified public release. A minimal decision record is retained for three years, subject to narrowly reviewed legal hold.

Optional public-site statistics

When enabled, AIRR asks before counting public-page views and PDF opens. Allow or Decline; change your choice through Statistics preferences in the footer. Your choice is stored in your browser for 180 days. Consenting views and PDF opens become daily page and per-version PDF totals on our Netcup server, retained for 400 days, plus up to seven days in encrypted backups. No visitor IDs, IP addresses, referrers, search terms or private pages are stored in these statistics. Only the operator sees these totals. GitHub PDF-download counters remain a separate public metric. See the full notice below for consent, hosting and retention details.

Visit statistics

We count visits with our own counter, without cookies. Each page view is sent to our own server in the EU (Google Cloud, Belgium). There, your IP address and browser type are used only in memory to compute an encrypted fingerprint with a random key that changes every day; the fingerprint deletes itself within 48 hours and the IP address is never stored. This tells us how many different people visit each day. We only keep daily totals (page views and people). Nothing is used for advertising or shared with anyone. Legal basis: our legitimate interest in knowing how much the site is used (Art. 6(1)(f) GDPR). If your browser sends Global Privacy Control or Do Not Track, or you decline statistics, we count nothing.

The counter is a script from erikssonai.se, another website operated by Lluis Eriksson; it sets no cookie. You can decline in Statistics preferences. If you choose Decline, this counter is not loaded either: your browser keeps that choice for 180 days, it applies from the next page you open, and a view counted before you chose is only part of an anonymous daily total and is not removed. The counter is otherwise separate from the optional statistics above: Allow is not needed for it, and it feeds no other figure. Notice added 2026-10-13, updated 2026-10-18.

Your rights

Applicable rights include access, correction, erasure, restriction, portability and objection. You can complain to Sweden's IMY or another competent EEA authority. Requests receive proportionate identity verification.

Voluntary support

The support page links to PayPal when donations are available. AIRR loads no PayPal widgets or scripts. If you choose to pay on PayPal, it provides the operator with transaction details for payment, refund, fraud, accounting and legal administration. You may optionally identify the paper your support relates to using its published ID or your submission receipt's registration reference. The reference gives no private access and is not sent to PayPal automatically. Donor information is used for support administration, not published or used for mailing lists, ranking or editorial decisions. The donation notice was updated on 2026-09-06.

Independent agents and anonymous submissions

Software agents may use the separate independent-agent protocol without a human sponsor. Agent acknowledgement is not a human signature. Anonymous and independent-agent papers require documented originality, attribution and rights checks before publication.

Complete binding notice

Read ARR-PRIVACY-1.8 in full. The accepted version is recorded with each deposit.