How we handle your data.

Science Rockstars is the data controller for the personal data described here. You can reach us any time at privacy@sciencerockstars.com.

The contact assistant. When you use the chat in our Contact section, we process the messages you send and the name and email you choose to share, so that Benno and Vincent can read your enquiry and get back to you. Sharing your details is voluntary — but without an email we can't reply. Legal basis: taking steps at your request, and our legitimate interest in responding to people who reach out.

One functional cookie. We store a single first-party cookie, sr_visitor— a random identifier with no personal information in it. It lets us recognise a return visit (so you don't repeat the same chat) and apply a fair daily limit on the assistant. It is not used for advertising or cross-site tracking, and it is never shared. It expires after twelve months.

Bot protection. We use Cloudflare Turnstile to keep automated abuse out. It reads limited technical signals from your browser to tell humans from bots; it does not profile you. Cloudflare processes this under its Turnstile Privacy Addendum.

Analytics. Any analytics we use are privacy-friendly and cookieless — they count visits in aggregate and do not build a profile of you or set tracking cookies.

Server logs. Like any website, our hosting keeps standard technical logs (such as IP address and timestamp) for security and reliability, kept only briefly.

To deliver the site and the assistant we rely on a few trusted providers, who process data only on our behalf:

• ·Anthropic — powers the AI assistant — your chat messages are sent to it to generate replies.
• ·Cloudflare — bot-protection (Turnstile).
• ·Resend — delivers your enquiry to our inbox by email.
• ·Upstash — stores the return-visit / daily-limit state.
• ·Vercel — hosts the website.

Some of these providers are based outside the EU (for example, in the United States). Where that is the case, the transfer is covered by appropriate safeguards such as the EU Standard Contractual Clauses.

We keep your enquiry and contact details for as long as we need them to respond and, where relevant, to continue the conversation — after which we delete them. The sr_visitor cookie expires after twelve months. You can ask us to delete your data at any time.

Under the GDPR you can ask us to access, correct, delete, or export your personal data, and you can object to or restrict how we use it. Email privacy@sciencerockstars.com and we'll take care of it. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

If we change how we handle data, we'll update this page and the date at the top.