Privacy Policy

This policy explains how personal data are handled on dbdigger.net, in our e-mail correspondence, and in the e-mails we send to researchers whose professional contact details are published on university and institute websites (section 4).

1. Who is responsible

• AR-LABS.IO, 8 The Green, Ste D, Dover, DE 19901, USA, maker of dbdigger and operator of this website.

For any question about your data, write to or reply to any e-mail you received from us.

2. Visiting the website

Server logs

When you open a page, the web server records technical data: IP address, date and time, the page requested, the referring page, and your browser's user agent. We use them to run the site and protect it from abuse, on the basis of our legitimate interest (Art. 6(1)(f) GDPR).

Fonts

The homepage loads the Inter and Montserrat fonts from Google Fonts (Google). Your browser then sends your IP address to Google.

Cookie choice and analytics

The cookie banner asks for your consent to analytics. Your choice is stored in your browser's local storage (key dbdCookieConsent) so that we do not ask again. You can change it at any time with the Cookie settings link at the bottom of each page.

• Google Analytics 4 (Google Ireland Limited, Google LLC). The Google tag is loaded on every page in Consent Mode: analytics cookies are set only after you click Accept. Until then, or if you decline, Google may receive cookieless signals about the visit.
• Microsoft Clarity (Microsoft Ireland Operations Limited, Microsoft Corporation), which records how pages are used (clicks, scrolling, session recordings), is loaded only after you click Accept.

The legal basis for analytics is your consent (Art. 6(1)(a) GDPR and the national rules on cookies). You can withdraw it at any time; this does not affect processing that took place before.

Spam protection

The contact and quote forms on the homepage are protected by Cloudflare Turnstile (Cloudflare, Inc.). The Turnstile script loads with the homepage and checks your browser to tell people from bots, so Cloudflare receives your IP address and technical data about your browser. The legal basis is our legitimate interest in protecting the forms from abuse (Art. 6(1)(f) GDPR).

Links to other services

The Book a Presentation links lead to TidyCal, and the project links lead to the websites of the University of Warsaw. These services have their own privacy policies.

3. Contact forms and e-mail

When you send the contact form or the quote request form, we receive your name or institution, e-mail address, and message, and for quote requests also the grant timeline and the scope you describe, together with your IP address, which helps us recognize spam. The form is delivered to our mailbox by e-mail through an OVH mail server. When you write to us directly, we receive your message and contact details.

We use these data to answer you and, for quote requests, to prepare a quote. The legal basis is steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

4. E-mails we send to researchers

We write to a limited number of researchers in archaeology and related fields about dbdigger. This section gives the information required by Art. 14 GDPR, because we did not receive these data from you.

• What data: your name, academic title, professional e-mail address, institution and department, country, and the address of the public web page where we found them; afterwards, any reply you send.
• Source: public web pages of universities and research institutions, such as staff lists and department pages.
• Purpose and legal basis: to tell researchers whose work involves field or collection data about a database application for research projects. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). We write only to professional addresses published in that capacity, send no more than three e-mails, and stop as soon as you ask.
• Who receives the data: we do not sell the list or pass it to anyone for their own purposes.
• Tracking: our e-mails are sent as plain text, without tracking pixels or tracked links.
• How long: until the end of the campaign, after which we delete the data. If you object, we keep only your e-mail address on a suppression list, so that we do not write to you again.
• Your right to object: you can object at any time, without giving reasons, by replying "no" or by writing to the address in section 1. We will not write to you again (Art. 21(2) and (3) GDPR).

5. Data in customers' projects

Data that customers store in dbdigger projects hosted by us are processed on the customer's behalf under a data processing agreement (Art. 28 GDPR). This policy does not cover them; the customer's own policy applies.

6. Transfers outside the EEA

AR-LABS.IO is based in the USA, and Google, Microsoft, and Cloudflare may process data in the USA.

7. Your rights

You have the right to access your data, to have them corrected or erased, to restrict their processing, to data portability where processing is based on consent or a contract, and to object to processing based on our legitimate interest. Where processing is based on consent, you may withdraw it at any time. To use these rights, write to the address in section 1.

You may also lodge a complaint with a data protection authority: in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl), or the authority in the country where you live or work.

8. Automated decisions

We do not make decisions about you based solely on automated processing, including profiling.

9. Changes to this policy

We publish any change on this page together with a new date.