Privacy Policy
Last updated: March 2026
1. Data Controller
The data controller for personal data collected on the SciLit platform is:
- Organisation : Mythodologie (France)
- Project : SciLit — Scientific Literacy & Human Rights, co-funded by the Erasmus+ programme
- Contact : contact@scilit.eu
2. Data Collected
As part of using the platform, we collect the following data:
2.1 Account Data
- Full name (optional)
2.2 Learning Data
- Quiz answers and scores
2.3 Community Data
- Comments on learning sections
2.4 Technical Data (with consent only)
- Browser user agent (only if you accept all cookies)
3. Legal Basis for Processing
- Consent (Art. 6.1.a GDPR): for optional data collection (IP, user agent, browser language) and email notifications
- Contractual necessity (Art. 6.1.b GDPR): for account creation and learning progress management
- Legitimate interest (Art. 6.1.f GDPR): for platform security and administration logs
4. Sub-processors
We use the following service providers to operate SciLit:
- Supabase (EU region eu-west-3) — Database and authentication
- OVH (France) — Web server hosting
- Google OAuth (if used) — Third-party authentication
- PlanetHoster (Canada/France) — Email delivery
5. Data Retention
- User accounts: 3 years after last activity
- Email reminder logs: 1 year
- Administration logs: 2 years
- Moderation logs: 1 year
- Pre-registrations: until platform launch, then deleted or converted
6. Your Rights
In accordance with GDPR, you have the following rights:
- Right of access: obtain a copy of your personal data
- Right to rectification: correct inaccurate data
- Right to erasure: delete your account and all associated data
- Right to data portability: export your data in a standard format
- Right to restriction: limit the processing of your data
- Right to object: object to processing based on legitimate interest
To exercise these rights, use the Settings page of your account or contact us at contact@scilit.eu. You also have the right to lodge a complaint with your national data protection authority.
7. Email Communications
If you opt in to email reminders, we may send you learning progress updates. Email delivery status (sent, failed) may be logged for quality purposes. You can unsubscribe at any time from your Settings page.
8. Minors
SciLit is intended for users aged 16 and over (Article 8 GDPR). Registration requires confirming that you are at least 16 years old.
9. Cookies
SciLit uses the following cookies:
- i18n_redirected — Stores your language preference (functional)
- scilit-preview — Grants preview access to partners (functional)
- Supabase session — Authentication (essential)
- scilit_cookie_consent — Stores your cookie choice (essential)
No advertising or tracking cookies are used.
10. International Transfers
All data is stored within the European Union (Supabase eu-west-3, OVH France). No personal data is transferred outside the EU.
11. Data Security
We implement appropriate technical measures to protect your data, including encrypted connections (HTTPS), Row Level Security on our database, and access controls for administrative functions.
12. Changes to This Policy
We may update this policy from time to time. The last updated date will always be displayed at the top of this page.