Privacy Policy

ScholaThomistica is a non-commercial digital library of scholastic theological texts, operated by Julio Alonzo Müller. Contact: contact@scholathomistica.com. Full operator details on the Imprint page.

We act as the data controller for the personal data described below, within the meaning of the EU General Data Protection Regulation (GDPR).

We keep the smallest set of data the platform actually needs:

• Account data. Username, email address, and a one-way hash of your password. You provide these at signup.
• Contributions. The text of any correction, proposal, or translation you submit, along with a timestamp and your user ID. If approved, the contribution becomes part of the canonical corpus.
• Server logs. Our hosting provider (Railway) records IP addresses, request paths, and timestamps for operational purposes. These are not linked to account records.

We do not use analytics, session replay, advertising pixels, or any third-party tracking scripts.

• Your account and contributions are processed to perform the contract between you and the platform — GDPR Art. 6(1)(b).
• Server logs are processed under our legitimate interest in keeping the service secure and operational — GDPR Art. 6(1)(f).

• Account data is kept until you ask for deletion.
• Contributions are kept indefinitely as part of the open corpus, under the license you granted when submitting them (see the Terms of Service). When you request account deletion, we sever the link between your identity and those contributions so that they remain in the library but are no longer attributed to you personally.
• Server logs are retained per our hosting provider’s default rotation (approximately 30 days).

Personal data is processed by the following subprocessors:

• Railway — hosting and managed Postgres database. Located in the United States; data-processing terms available from Railway.
• Resend — transactional email delivery for account verification and essential account messages. Located in the United States; receives the recipient email address and the email content needed to deliver the message.
• Sentry — error monitoring for production stability. Located in the United States; receives technical error details such as stack traces, browser/runtime metadata, and request context. Session replay and analytics are disabled.

We do not sell personal data, and we do not share it with advertisers.

We do not set any cookies. We store two pieces of information in your browser’s local storage: your login token, so you stay signed in between visits, and your light/dark theme preference. Both stay on your device and are used only to make the site work as you would expect. Under the ePrivacy Directive these qualify as strictly necessary and no consent banner is required.

We do not set analytics, advertising, or preference cookies. If that ever changes, we will put up a proper consent banner first.

A core part of the project is improving OCR for scholastic Latin. Approved contributions — paired with the page scan they came from — are used to train and evaluate OCR models, as disclosed in the contributor license grant in the Terms of Service. Training uses the text and scan only; account metadata (username, email) is never part of the training data.

Under GDPR you have the right to:

• access the personal data we hold about you;
• correct it if it’s inaccurate;
• ask us to erase your account (see the Terms for what happens to your already-licensed contributions);
• restrict or object to processing;
• receive your account data in a portable format;
• lodge a complaint with the data protection authority in your country.

To exercise any of these, write to contact@scholathomistica.com. We respond within 30 days.

If this policy changes in a way that affects how we handle data you’ve already given us, we’ll update the Last updated date and, where the change is material, notify registered users by email.