Privacy Policy

1. Data Controller

The SciLit platform is operated jointly by the project partners.

• ASUR (Asociația Secular-Umanistă din România), address: Str. Ajustorului, nr. 6, bl. C3, etaj 1, ap. 8, sector 6, Bucharest, Romania, coordinates the project and determines what data is collected and why.
• Mythodologie (France), address: 2 bis rue Michelet, 38000 Grenoble, France, develops and hosts the platform.

For any question about your data or to exercise your rights, contact contact@scilit.eu or office@asur.ro.

Project name: “Scientific Literacy as a Catalyst for Change: Addressing pseudoscience and science disinformation in relation to human rights”. Co-funded by the European Union through the Erasmus+ programme.

Reference no: 2025-1-RO01-KA220-YOU-000357084.

2. Data Collected

2.1 Account Data

• First name (required)
• Surname (required)
• Email address (required)
• Whether you are a young person or a youth worker (required)
• Public name (a nickname generated automatically, which you can change)
• Profile photo (optional)
• Username (optional)

The first four are needed to create your account and to record your participation in the project. Other learners see your public name, not your real name.

2.2 Learning Data

• Quiz answers and scores
• Progress in modules and sections
• Points, badges and learning streaks
• Answers and scores for the questionnaire at the start and at the end of the course
• Poll votes and the commitments you choose in “Our Approach”, used only as aggregated statistics for the project's reports

2.3 Community Data

• Comments on learning sections
• Discussion posts and replies
• Content reports

2.4 Technical Data (with consent only)

• Browser user agent (only if you switch on “Technical statistics” in Cookie settings)
• Browser language preferences (same condition)

3. Legal Basis for Processing

• Contractual necessity (Art. 6(1)(b) GDPR): account creation, learning progress management, and recording your participation in the project
• Consent (Art. 6(1)(a) GDPR): email notifications about new modules / content on the platform, and optional technical data (user agent, browser language)
• Legitimate interest (Art. 6(1)(f) GDPR): platform security, administration logs, and community comment moderation

4. Reporting to the Funder

SciLit is funded by the European Union under the Erasmus+ programme. As a condition of that funding, we have to be able to show who took part in the project. Your name, surname, email address and whether you are a young person or a youth worker are therefore shared with the Romanian National Agency, which manages the grant, and with the European Commission, as funder.

This is used only to evidence participation. It’s not used for marketing, advertising or profiling.

When you finish the course, your first name, surname and email address are also shared with the SciLit partner organisation in your country, so that it can issue your Youthpass certificate and email it to you.

5. Sub-processors

• Self-hosted PostgreSQL (Germany, OVH) — Database and Ory Kratos for authentication
• OVH (France) — Web server hosting
• Google OAuth (if used) — Third-party authentication
• PlanetHoster (Canada/France) — Email delivery

6. Data Retention

• Participation records (first name, surname, email address, and the young person or youth worker indicator): retained for five years from the date of the final balance payment for the project, as required by the Erasmus+ grant agreement, so that participation can be evidenced in the event of an audit. This applies even if you delete your account.
• User accounts and learning data: 3 years after last activity
• Community comments: until you delete the comment or your account
• Email reminder logs: 1 year
• Administration logs: 2 years
• Moderation logs: 1 year
• Pre-registrations: until platform launch, then deleted or converted

7. Your Rights

In accordance with GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate data
• Right to erasure: delete your account and associated data. Note that we must keep a minimal record of your participation for five years from the final payment of the project grant, as explained in section 6. Everything else is deleted.
• Right to data portability: export your data in a standard format
• Right to restriction: limit the processing of your data
• Right to object: object to processing based on legitimate interest

To exercise these rights, use the Settings and Profile pages of your account or contact us at contact@scilit.eu. You also have the right to lodge a complaint with your national data protection authority.

8. Email Communications

If you opt in to email notifications, we send you a confirmation email. The subscription becomes active once you click the link in it.

After that, we may send you updates about new modules and your learning progress. Email delivery status (sent, failed) may be logged for quality purposes. You can unsubscribe at any time from your Settings page or your profile, without affecting your account.

9. Minors

In the partner countries, SciLit is open to people aged 14 and over, except in Slovenia, where the minimum age is 15. If you register from another country, the minimum age is the one set by your national law.

We do not ask minors for parental consent, and we do not collect date or year of birth. This is because we do not rely on consent to give you an account. Article 8 GDPR, which sets a digital consent age of 13 to 16 depending on the country, applies only where processing is based on consent. Here the basis is the agreement you enter into with us when you accept the platform's terms and create an account (Art. 6(1)(b) GDPR). Article 8(3) leaves that to national law, which sets the age at which a young person can enter into an arrangement of this kind on their own.

The optional email notifications are based on consent, and you can withdraw that at any time from your Settings page or your profile without affecting your account.

If you accept an invitation from a teacher or facilitator, they can see your learning progress (points, modules completed, last activity). You can review and revoke that link at any time from your profile.

10. Cookies

SciLit only uses what the site needs to work. Nothing optional runs without your consent, which is why there's no cookie banner.

• Necessary cookies, always active: sign-in and its security, your language, partner preview access. scilit_session, scilit_refresh, oidc_state, oidc_nonce, oidc_init_code, scilit_recovery_session, i18n_redirected, scilit-preview
• Local storage on your device: your choices on the cookie page, your display preferences (animations included) and your progress in the activities. This data stays in your browser.
• Campaign link measurement (30 days): only if you arrive through a partner creator's link, to count the visits and sign-ups it brings. Nothing is shared with third parties. scilit_campaign
• Optional, off by default: technical statistics (browser user agent and languages, sent to SciLit only), YouTube videos (Google) and the OpenStreetMap map. You can switch them on or off at any time.

No advertising cookies, no tracking across sites. The full list (name, purpose, provider, duration) and your settings are on this page: Cookie settings

11. International Transfers

All data is stored within the European Union (self-hosted PostgreSQL in Germany on OVH). No personal data is transferred outside the EU.

12. Data Security

We implement appropriate technical measures to protect your data, including encrypted connections (HTTPS) and access controls for administrative functions.

13. Changes to This Policy

We may update this policy from time to time. The last updated date will always be displayed at the top of this page.