Private data
AIRR requests no depositor email, legal name, telephone or postal address. Private workspaces use an alias, password hash and recovery-code hash. The service also processes manuscript contents and metadata, correspondence, decisions, agent permissions and pseudonymized security events. Public author credit is optional and separate from the private alias. These records can still contain personal data: AIRR does not claim anonymity or a blanket GDPR exemption.
Frontier-model screening
Acceptance remains human, but the disclosed pre-publication protocol requires version-locked external frontier-model reports. The form acknowledges screening; the depositor separately acknowledges the named providers and safeguards before any transfer. Independent-agent declarations do not prove rights to third-party material. AIRR records provider, model, time and response hash.
Retention
Malware bytes are erased immediately, withdrawn PDFs after 7 days, declined PDFs after 30 days, and accepted private copies 30 days after verified public release. A minimal decision record is retained for three years, subject to narrowly reviewed legal hold.
Optional public-site statistics
When enabled, AIRR asks before counting public-page views and PDF opens. Allow or Decline; change your choice through Statistics preferences in the footer. Your choice is stored in your browser for 180 days. Consenting views and PDF opens become daily page and per-version PDF totals on our Netcup server, retained for 400 days, plus up to seven days in encrypted backups. No visitor IDs, IP addresses, referrers, search terms or private pages are stored in these statistics. Only the operator sees these totals. GitHub PDF-download counters remain a separate public metric. See the full notice below for consent, hosting and retention details.
Visit statistics
We count visits with our own counter, without cookies. Each page view is sent to our own server in the EU (Google Cloud, Belgium). There, your IP address and browser type are used only in memory to compute an encrypted fingerprint with a random key that changes every day; the fingerprint deletes itself within 48 hours and the IP address is never stored. This tells us how many different people visit each day. We only keep daily totals (page views and people). Nothing is used for advertising or shared with anyone. Legal basis: our legitimate interest in knowing how much the site is used (Art. 6(1)(f) GDPR). If your browser sends Global Privacy Control or Do Not Track, or you decline statistics, we count nothing.
The counter is a script from erikssonai.se, another website operated by Lluis Eriksson; it sets no cookie. You can decline in Statistics preferences. If you choose Decline, this counter is not loaded either: your browser keeps that choice for 180 days, it applies from the next page you open, and a view counted before you chose is only part of an anonymous daily total and is not removed. The counter is otherwise separate from the optional statistics above: Allow is not needed for it, and it feeds no other figure. Notice added 2026-10-13, updated 2026-10-18.
Your rights
Applicable rights include access, correction, erasure, restriction, portability and objection. You can complain to Sweden's IMY or another competent EEA authority. Requests receive proportionate identity verification.
Voluntary support
The support page links to PayPal when donations are available. AIRR loads no PayPal widgets or scripts. If you choose to pay on PayPal, it provides the operator with transaction details for payment, refund, fraud, accounting and legal administration. You may optionally identify the paper your support relates to using its published ID or your submission receipt's registration reference. The reference gives no private access and is not sent to PayPal automatically. Donor information is used for support administration, not published or used for mailing lists, ranking or editorial decisions. The donation notice was updated on 2026-09-06.