KRXY

Legal

Privacy notice

What the KRXY website stores, who is responsible for it, and how to ask about it.

This notice describes the website at https://krxy.org as it runs. It is not legal advice, and a solicitor has not certified it.

KRXY is the name of an independent AI research project. It is not a registered company and it is not a charity. MIK INDUSTRIES LIMITED, company number 15304261, registered office 3rd Floor, 86-90 Paul Street, London, EC2A 4NE, operates this website and receives Research Support payments. That company is the controller of personal information collected through the site. Write to info@krxy.org.

Contact form

If you send an enquiry, the database stores your name, email address, category, subject and message, the fact that you ticked the privacy acknowledgement, the time, a hash of the network address rather than the address itself, and the browser user-agent string. The form exists so the project can read what you sent. The company relies on the fact that you asked it to receive the message, and on its legitimate interest in answering enquiries and limiting abuse. The tick box is an acknowledgement of this notice. It is not a request to use your details for marketing.

An administrator deletes a stored enquiry by hand. The application has no automatic retention period for these records, so this notice does not invent one. If outbound email is configured, a notification may be sent to the project mailbox. The form says so when it is not. A mail server accepting a message is not the same as the message reaching an inbox.

Research Support

A payment starts on this site and is completed on a page hosted by Stripe. The site does not receive or store your card number. The company stores the amount, currency, payment status, any refunded amount, the Stripe fee and net amount when Stripe provides them, and Stripe's reference numbers. Name and receipt details entered at Checkout stay with Stripe. Stripe's own privacy notice describes that processing.

The company is not registered for VAT, so VAT is not added. This is not a statement that a payment is exempt, zero-rated, or outside the scope of VAT.

Administration and the theme control

Ordinary visitors do not receive an authentication cookie. A person who signs in receives an HTTP-only cookie named krxy_session, limited to this site, for 12 hours, so the administration area can stay signed in. The sign-in form sets krxy_login_csrf for 2 hours, also HTTP-only, to check that the sign-in request came from the form. These are used for security. They are not advertising cookies.

The theme button stores krxy-theme in the browser's local storage only after you use it. The server does not receive that value. Cookie settings in the footer can remove it.

Journal, hosting and other records

Journal entries are read from the project's Hashnode feed. A cover image may be requested from cdn.hashnode.com. Following a journal link leaves this site, and the article's canonical address stays on Hashnode.

The application and its database run on the server that hosts krxy.org. Rate-limit records are stored as a hash and become eligible for deletion after 24 hours. The site does not run an analytics or advertising product, and this notice does not describe one.

Your requests

You can ask for a copy of a contact enquiry, ask for it to be deleted, or object to processing that relies on legitimate interests, by writing to info@krxy.org. You can also complain to the Information Commissioner's Office. The company will handle a request as UK data protection law requires. This page does not shorten that.

The date shown on the page is the date this text was published. Administration keeps the previous text as a revision.

Privacy notice | KRXY