Privacy Policy
Version 1.8 · Effective 1 April 2026 · Last revised 12 May 2026 · GDPR-aligned
1. Overview
Adjudged Foundation ("we", "us") is the data controller for personal data processed via Adjudged.org. We are a not-for-profit registered in the Netherlands (KvK 92345678) and we process data in line with the EU General Data Protection Regulation (GDPR) and the Dutch UAVG.
This policy explains what data we collect, why, who we share it with, and your rights. We try to write it in plain language - if anything is unclear, ask: privacy@adjudged.org.
2. What we collect
We collect different categories of data depending on how you use the Service:
- Account data - email address; optional name; password hash (never the password itself); preferences such as theme and language
- Submission data - claims you submit, optional context, suggested sources, optional email if you want to be notified
- Usage data - pages visited, search queries (associated with your account only if logged in); device and browser type; approximate location at the country level
- Communication data - emails or messages you send us
We do not use third-party advertising trackers, fingerprinting, or session replay tools. We do not sell or rent personal data to anyone, ever.
3. Why we process it
We use your data only for purposes that are necessary for, or directly support, the Service:
- To operate the Service and provide the features you use
- To authenticate you and protect your account
- To improve the editorial product (e.g. understand which topics readers care about)
- To detect and prevent abuse (e.g. credential stuffing, automated scraping)
- To communicate with you about your submissions or account
- To comply with legal obligations (e.g. tax records, court orders)
4. Legal bases (GDPR Art. 6)
Our lawful bases for processing under GDPR are:
- Contract (Art. 6(1)(b)) - for account-related processing necessary to deliver the Service
- Legitimate interests (Art. 6(1)(f)) - for fraud prevention, abuse detection, and aggregate usage analytics, where these do not override your fundamental rights
- Consent (Art. 6(1)(a)) - for optional features such as email notifications about your submissions
- Legal obligation (Art. 6(1)(c)) - where we must comply with applicable law
6. How long we keep data
We retain personal data only as long as needed for the purposes described above:
- Account data: until you delete your account, then within 30 days
- Submission data: indefinitely if your submission becomes a published article (CC BY-SA), otherwise 12 months
- Usage logs: 90 days
- Communication: 24 months
- Records required by law: as long as the law requires
8. Your rights under GDPR
You have the right to:
- Access the personal data we hold about you (Art. 15)
- Rectify inaccurate data (Art. 16)
- Erase your data, subject to legal retention requirements (Art. 17)
- Restrict processing in certain circumstances (Art. 18)
- Portability - receive your data in a machine-readable format (Art. 20)
- Object to processing based on legitimate interests (Art. 21)
- Withdraw consent at any time, without affecting prior lawful processing
To exercise any of these rights, contact privacy@adjudged.org. We respond within 30 days.
9. Security
We use industry-standard security measures, including TLS encryption in transit, encrypted password hashing, scoped access controls for staff, and regular security review. No system is perfectly secure; if we become aware of a breach affecting personal data, we will notify affected users and the relevant supervisory authority as required by Art. 33 and 34 of the GDPR.
10. Changes to this policy
Material changes will be notified at least 30 days in advance via email to registered users and a notice on the Service. The full revision history is available on request.
11. Contact
For any data-protection questions, contact our Data Protection Officer at privacy@adjudged.org or by post:
Adjudged Foundation - Data Protection
Postbus 12345
1000 AA Amsterdam
The Netherlands