Privacy notice
What we keep, and for how long
No tracking
This site sets no cookies, loads nothing from third parties, and runs no analytics. The web server keeps ordinary access logs (request path, time, the address it saw) for operations and abuse handling; they are rotated within thirty days.
What we process, and why
| Outcome set | The list you submit (names, entries, numbers). Needed to canonicalize the selection and to produce the report. Legal basis: performance of the contract. If it contains other people's names, you are responsible for being entitled to submit them; we process it only on your instruction. |
|---|---|
| Delivery email address | To deliver the report and to answer questions about the transaction. Legal basis: performance of the contract. |
| Transaction title | Optional. Appears in the report and in the published commitment manifest, permanently and publicly. Legal basis: your choice to enter it. Do not enter personal data you would not put on a public notice board. |
| Payment | Handled by Stripe. We receive a payment reference and the settlement status, never card details. Stripe's own notice covers what Stripe keeps. Legal basis: performance of the contract and bookkeeping law. |
| Transaction record | Timestamps, states, digests, hardware job identifiers, and the resolved outcome, kept as the evidentiary record the product exists to provide. Legal basis: performance of the contract and our legitimate interest in being able to prove what was committed and executed. |
How long
The report PDF is kept for 90 days after delivery and then deleted from our servers; it can be regenerated from the transaction record on request. Your email address is deleted from the transaction record at the same time. The outcome set is kept as part of the transaction record for as long as the record exists, because the published digest commits to it and the record is otherwise unverifiable; you can ask us to delete it earlier, in which case the record keeps only the digest. Bookkeeping data (the payment reference and amount) is kept for seven years as Swedish law requires. Selections that were never paid for are deleted after 30 days.
What is public, permanently
The commitment and resolution records are published to the public DNS zone eigenselect.eu, to public Nostr relays that we do not control, and on this site. They contain the transaction ID, the transaction title, the outcome count, cryptographic digests of the outcome set and of the circuit, timestamps, and the numeric position of the winning outcome. They do not contain names, the outcome set itself, or your email address. Records on DNS and Nostr cannot be recalled once published; this is the point of them, and it is why the title is the one field you should treat as public.
Who else sees data
Scaleway (France) hosts the service, sends the delivery email, and runs the quantum processor; the processor receives only the circuit, which contains nothing about you or your outcomes. Stripe processes payment. Public Nostr relays receive the published records described above. Nobody receives your outcome set except us and, if you download the report, whoever you give it to. Data stays inside the EU/EEA except for Nostr relays, which are public and worldwide by nature and receive only the public records.
Your rights
You can ask for a copy of the data we hold about a transaction, ask us to correct it, delete it (subject to the bookkeeping and evidentiary limits above), or object to processing, by writing to info@eigenselect.com with the transaction ID. You can complain to the Swedish Authority for Privacy Protection (IMY, imy.se) or to the supervisory authority where you live.