Privacy notice
What we keep, and for how long
No tracking
This site sets no cookies, loads nothing from third parties, and runs no analytics. The web server keeps ordinary access logs (request path, time, the address it saw) for operations and abuse handling; they are rotated within thirty days.
What we process, and why
| Outcome set | The list you submit (names, entries, numbers). Needed to canonicalize the selection and to produce the report. Legal basis: performance of the contract. If it contains other people's names, you are responsible for being entitled to submit them; we process it only on your instruction. |
|---|---|
| Delivery email address | To deliver the report and to answer questions about the transaction. Legal basis: performance of the contract. |
| Transaction title | Optional. Appears in the report and in the published commitment manifest, permanently and publicly. Legal basis: your choice to enter it. Do not enter personal data you would not put on a public notice board. |
| Payment | Handled by Stripe. We receive a payment reference and the settlement status, never card details. Stripe's own notice covers what Stripe keeps. Legal basis: performance of the contract and bookkeeping law. |
| Transaction record | Timestamps, states, digests, hardware job identifiers, and the resolved outcome, kept as the evidentiary record the product exists to provide. Legal basis: performance of the contract and our legitimate interest in being able to prove what was committed and executed. |
How long
The customer's actively served report PDF is kept for 90 days after delivery and then deleted; it can be regenerated from the transaction record on request. Your email address is deleted from the active transaction record at the same time. An immediate off-box recovery copy expires after 35 days. Nightly state backups are access-controlled and are not used for ordinary access, but an older snapshot can retain the PDF and email address for up to 90 days after the active copy is removed. For an ordinary delivered transaction, the last backup copy therefore expires no later than 180 days after delivery. A restored snapshot is subjected to the same retention sweep before the service returns to ordinary use. The outcome set is kept as part of the transaction record for as long as the record exists, because the published digest commits to it and the record is otherwise unverifiable; you can ask us to delete it earlier, in which case the record keeps only the digest. Bookkeeping data (the payment reference and amount) is kept for seven years as Swedish law requires. Selections that were never paid for are deleted after 30 days.
The worked example is a separate, deliberately published copy of a service-operated test transaction. It contains no delivery email address or holder URL and is retained as public product documentation.
What is public, permanently
The commitment and resolution records are published to the public DNS zone eigenselect.eu, to public Nostr relays that we do not control, and on this site. They contain the transaction ID, the transaction title, the outcome count, cryptographic digests of the outcome set and of the circuit, timestamps, and the numeric position of the winning outcome. They do not contain names, the outcome set itself, or your email address. Records on DNS and Nostr cannot be recalled once published; this is the point of them, and it is why the title is the one field you should treat as public.
Who else sees data
Scaleway (France) hosts the service, sends the delivery email, and runs the quantum processor; the processor receives only the circuit, which contains nothing about you or your outcomes. Stripe processes payment. Public Nostr relays receive the published records described above. Nobody receives your outcome set except us and, if you download the report, whoever you give it to. Data stays inside the EU/EEA except for Nostr relays, which are public and worldwide by nature and receive only the public records.
Your rights
You can ask for a copy of the data we hold about a transaction, ask us to correct it, delete it (subject to the bookkeeping and evidentiary limits above), or object to processing, by writing to info@eigenselect.com with the transaction ID. You can complain to the Swedish Authority for Privacy Protection (IMY, imy.se) or to the supervisory authority where you live.