What we keep,
and what we don’t.
Information under Articles 13 and 14 of the General Data Protection Regulation (GDPR / DSGVO).
The short version
We run a small community site. We do not use analytics, advertising, or any third-party tracking. The site loads no fonts, scripts, or images from other companies. We do not sell or share your data with anyone for their own purposes, and we do not profile you or make automated decisions about you.
Most of what we store is simply what you chose to publish. The rest is your reading list, which only you can see, and enquiries you send us, which only the organiser can see.
Who is responsible
The controller for the processing described here is:
- Name
- Göktug Önyer
- Address
- Florianigasse 50, 1080 Wien, Austria
- Contact
- kontakt@cyberaiclub.at
Full operator details are in the imprint. We have not appointed a data protection officer; we are not required to. Write to the address above for anything on this page.
Signing in
Signing in works by email: you type your address, we send you a single-use link, and opening it signs you in. There is no password — none to choose, none for us to store, none to lose. Supabase runs this for us and keeps your email address and a user identifier in its own account records, so that the same address brings you back to the same profile.
In our own tables we store only the user identifier. It is a random-looking string rather than your name or email, and it is what links your profile, posts, replies, reading list, and follows to you. It is attached to everything you publish, and it appears in the site’s public data alongside your posts.
Your email address is not copied into your profile. On an ordinary request it is checked in the moment, purely to see whether you are the designated organiser, and then discarded. There is one exception: when you send an enquiry we save the address on your account, so the organiser has a working way to reply. Some forms offer a starting value taken from your account — what you actually type is what gets saved.
What we store
- Member profile
- Public. Your handle, display name, optional city, optional short bio, topics you pick, and when you joined. You choose all of it and can change it at any time at /register.
- What you publish
- Public. Discussions, articles, replies, and session proposals — their text, topic, and time of posting, shown under your display name and handle.
- Your reading list
- Private to you. Which stories and posts you saved, and when. Nobody else can read it, and it is never shown publicly.
- Who you follow
- Partly public. We store which members you follow. Follower counts are shown on writer profiles.
- Enquiries
- Private to the organiser. When you register interest in a meeting or offer a partnership, we store the name and message you enter, the email address on your account, what the enquiry was about, your consent, and the time. Only the designated organiser can read these, so that they can reply to you.
- Meetings
- Public. Dates, locations, and agendas written by the organiser. These contain no personal data about members.
The contact address on an enquiry is taken from your account rather than typed in, so it is always an address that reaches you and cannot be used to direct the organiser at somebody else. The name is whatever you enter. If you would rather be contacted at a different address, say so in the message.
Why we are allowed to store it
- Your account and what you publish
- Article 6(1)(b) GDPR — we cannot run a membership site with profiles, posts, and reading lists without storing them. Registering is entirely voluntary; the site is readable without an account.
- Enquiries
- Article 6(1)(a) GDPR — your consent, which you give with the tick box on the form and can withdraw at any time.
- Keeping the site working and safe
- Article 6(1)(f) GDPR — our legitimate interest in operating the site, preventing abuse, and fixing faults.
Cookies and tracking
We set no cookies of our own, and we run no analytics, advertising, or tracking of any kind. The sign-in process uses a cookie to remember that you are signed in; that is necessary for signing in to work at all, and it does nothing else.
Because the site loads nothing from other companies — no web fonts, no hosted scripts, no embedded media — no third party learns that you visited simply by your opening a page here.
Who else is involved
Two providers process data on our behalf, under contract and on our instructions:
- Vercel
- Hosts the site and serves every page.
- Supabase
- Runs the database and handles signing in. The database is hosted in Frankfurt, Germany (eu-central-1), inside the European Union.
Both keep short-term technical logs — that a request arrived, that something failed — as part of running the service. Both are companies that operate internationally, so some processing, particularly support and operations, may take place outside the European Economic Area under the safeguards those providers have in place.
Re-check this section whenever a provider is added or changed.
How long we keep it
Anything you publish stays until you delete it or ask us to. You can delete your own posts at any time; their replies and any saved references go with them.
Your profile, reading list, and follows are kept while your membership lasts. Write to us to have them removed.
Enquiries are kept so the organiser can follow up and know what was agreed. They are not deleted on a timer, but you can withdraw any of them yourself at /register, which deletes the enquiry outright and takes back your consent to hold it.
Your rights
Under the GDPR you may ask us to:
- Show you what we hold about you (Art. 15).
- Correct anything wrong (Art. 16). Profile details you can edit yourself at /register.
- Delete what we hold (Art. 17). Your own posts and your own enquiries you can delete yourself; write to us to remove your profile and account.
- Restrict what we do with it (Art. 18).
- Hand it over in a portable form (Art. 20).
- Object to processing based on our legitimate interest (Art. 21).
- Withdraw consent for enquiries at any time (Art. 7(3)) — the withdraw button at /register does exactly that. Withdrawing does not undo processing that already happened.
Write to kontakt@cyberaiclub.at. We will answer within one month. There is no charge, and you do not have to give a reason.
One thing to be aware of: discussions are conversations. If you delete a post that other members replied to, their replies go too.
If you are unhappy
You can complain to the supervisory authority, whatever we say:
A word about what you post
Everything in the community is public and can be read by anyone, including people who are not members and search engines. Please keep credentials, personal data about other people, and anything confidential out of your posts — once something is published, we cannot control who has already read or copied it.
Changes
If we change how any of this works, we will update this page and the date below. Where a change materially affects you, we will say so in the community.
Last updated 17 September 2026.