Privacy policy

This English version is provided for convenience; the German version is authoritative. Information per Art. 13 GDPR. Last updated: 27 July 2026.

Controller

Georg Mayer, Erdbergstraße 89/20, 1030 Vienna, Austria — e-mail: info@researchradar.at

In short

• No analytics or tracking, no ads, no third-party embeds (all fonts and scripts are served by this site itself).
• No profiling, no automated decision-making, no AI processing of personal data, no transfers to third countries.
• Without an account the site works without providing any personal data.
• Exactly one cookie, set only after signing in — hence no cookie banner.

Server logs

The web server keeps the usual technical log entries (IP address, time, requested address, browser identifier) for operation, debugging, and abuse defence — legitimate interest, Art. 6(1)(f) GDPR. Logs rotate daily and are deleted after 14 days.

Account (optional)

An account (for e-mail alerts and deadline reminders) stores: username, e-mail address, the password only as a hash (scrypt — the password itself is never stored), language, confirmation status, and registration time. Legal basis: contract, Art. 6(1)(b) GDPR.

Alerts and reminders

Your chosen notification settings (channels, sources, career stages, reminder days per grant) and sent-mail watermarks (when the last alert, weekly digest, or reminder mail went out — they prevent duplicates) are stored with the account. Legal basis: Art. 6(1)(b) GDPR.

Login abuse protection

Login and password-reset attempts store the username or e-mail together with the IP address for a 15-minute window to slow repeated failures; older entries are deleted automatically. Legal basis: legitimate interest in account security, Art. 6(1)(f) GDPR.

Cookie

This site sets exactly one cookie: the session cookie researchradar_session, only after signing in. It keeps you signed in for up to 90 days, is HttpOnly and SameSite=Lax. It is technically necessary; no consent is required. No other cookies or browser storage are used.

E-mail

Confirmation, reset, alert, and reminder mails are sent via our own mail server, sender mail@researchradar.at. No external mail providers are used; e-mail addresses are not shared.

Retention and deletion

• Account data is kept until the account is deleted — currently on request by mail to info@researchradar.at.
• Confirmation links are valid for 48 hours, reset links for 2 hours.
• Throttle entries are deleted after their 15-minute window, server logs after 14 days.

Your rights

Per Art. 15–21 GDPR you have the right to access, rectification, erasure, restriction, data portability, and objection — an informal e-mail to info@researchradar.at suffices. You may also complain to the Austrian data protection authority: dsb.gv.at.