Privacy Policy
Last updated: October 4, 2026
Introduction
Pupilla (“we”, “our”, or “us”) operates the website pupilla.org. This page explains what personal data is processed when you use the site, why, and what choices you have.
Information We Collect
Analytics Data (only with your consent)
If you click “Accept All” in the cookie banner, we use Google Analytics to understand how visitors use the site. This service may collect:
- Pages you visit on our site
- Time spent on pages
- Browser and device information
- General geographic location (country/city level)
- Referring websites
- Which PDF files are downloaded (so we know which content is most useful to our academic community)
If you click “Reject”, or make no choice, Google Analytics is not loaded and none of this is collected.
Comments and Reactions
Articles and essays have a discussion section powered by giscus, which stores comments and reactions in GitHub Discussions. Loading this section contacts giscus.app (and, through it, GitHub), which can see your IP address and browser details. If you choose to comment or react, you sign in with your GitHub account: GitHub then processes your data under the GitHub General Privacy Statement, and your comment is public.
Newsletter
If you subscribe to our newsletter using the form in the page footer, your email address is sent to Buttondown, the service we use to deliver it (see the Buttondown privacy policy). We use it only to send you updates about new articles and essays. Every email contains an unsubscribe link.
Hosting
The site is hosted on GitHub Pages (United States). Like any web host, GitHub receives your IP address and standard request information when you load a page.
Fonts
The fonts used on this site are served from our own server. They are not loaded from Google or any other third party.
What is stored in your browser
The only thing we store in your browser is your cookie choice (“accepted” or “rejected”), in your browser’s local storage. If you accept analytics, Google Analytics also sets its own cookies.
How We Use Information
We use the information above to:
- Improve our website and user experience
- Understand which research topics are of most interest
- Provide the discussion section and the newsletter
Data Sharing
We do not sell or trade your personal information. It is shared only with the services described above, which act on our behalf or at your initiative:
- Google Analytics (only if you accept; see Google’s Privacy Policy)
- giscus and GitHub (comments, hosting)
- Buttondown (newsletter, only if you subscribe)
- As required by law
Your Choices
Cookie Consent
You can accept or reject analytics through the cookie banner. You can change your mind at any time with the Cookie settings link in the footer of every page. Using it clears your choice and removes any Google Analytics cookies, and the banner appears again.
Newsletter and Comments
You can unsubscribe from the newsletter at any time using the link in any email. You can edit or delete your own comments on GitHub.
Browser Settings
You can also:
- Block cookies in your browser settings
- Use browser extensions that block tracking
- Enable “Do Not Track” in your browser
Data Retention
Google Analytics data is retained according to Google’s data retention settings. Newsletter addresses are kept until you unsubscribe. Comments remain on GitHub until they are deleted. We do not store other personal data on our own servers.
International Data Transfers
Our website is hosted on GitHub Pages (United States). Analytics data (if you accept), newsletter data and comment data are processed by Google, Buttondown and GitHub according to their own data processing practices, which may involve transfers outside the European Union.
Children’s Privacy
Our service is intended for academic and research purposes. We do not knowingly collect personal information from children under 13.
Security
We implement appropriate security measures to protect your information, including:
- HTTPS encryption for all website traffic
- Secure hosting through GitHub Pages
- Minimal data collection practices
Changes to This Policy
We may update this privacy policy from time to time. We will notify users of any changes by posting the new policy on this page with an updated “Last updated” date.
Contact Information
If you have any questions about this Privacy Policy, or want to exercise your rights, please write to pupillarXiv@gmail.com.
Legal Basis (GDPR)
For users in the European Union, our legal basis for processing personal data is:
- Consent: for analytics (Google Analytics only runs if you accept, and you can withdraw consent at any time) and for the newsletter (you subscribe by choice)
- Legitimate interest: for the technical operation of the site, including hosting, and for the comment section, which you use by choice
Your Rights (GDPR)
If you are in the European Union, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent
To exercise these rights, please contact us using the information above.