Privacy policy.
How we handle information when you visit the lab website, read our publications, or contact us.
Last updated
This revision covers the lab website separately from its products. It also reflects the removal of Google Analytics and explains how the publications archive and RSS feed work.
Who we are and what this notice covers
Jubba Cyber Services B.V., trading as OVRLab, in the Netherlands, is responsible for personal data processed through ovrlab.io. You can contact us at support@ovrlab.io about this notice or your information.
This notice covers the lab website, its project descriptions, and its publications. Sanad, PqP Network, SecretProxy, and UltraNow have different functions and may process different information. When you use a project’s application or service, consult the privacy notice provided there.
Reading this website does not create a product account, connect your device to the PqP network, or submit content to an AI model.
Information needed to deliver the website
When you request a page, image, download, or RSS feed, our hosting and network provider, Cloudflare, processes the technical information needed to deliver and protect it. This may include your IP address, requested URL, browser and device information sent in HTTP headers, referring page, request time, and security or error information.
We use this information to operate the website, investigate faults, and protect it against abuse. Our legal basis is our legitimate interest in providing a reliable, secure website. Cloudflare may process some information for its own security and operational purposes as described in its privacy policy.
Cookies, analytics, and local features
This version of the website does not load Google Analytics, advertising trackers, or social-media tracking pixels. We do not use visitor data for targeted advertising or sell it.
The website does not set optional analytics or marketing cookies. Cloudflare may use cookies or similar technical measures where needed for security or traffic management; the features enabled for a request determine whether those measures are used. See Cloudflare’s cookie information.
Publication search and filters run in your browser. We do not send your search terms to a search service or save your filter choices in a website account. Fonts and project illustrations are served with the website.
Information you choose to send us
If you email us, we receive your email address, the name and other information you include, your message, and any attachments. Our email service providers process this correspondence to deliver and store it.
We use it to respond to your enquiry, discuss research or collaboration, and keep the records needed for that conversation. The legal basis is our legitimate interest in responding to correspondence, or taking steps at your request before entering into a contract when applicable. We may also retain information where a legal obligation requires it.
You can browse our publications without providing contact details. Please include only the personal information needed for your enquiry.
RSS and future email subscriptions
Our RSS feed is public. Following it does not give us your email address or create a mailing-list subscription. Your reader requests the feed like any other website resource, so the request information described above still applies. Your reader may also have its own privacy practices.
We do not currently operate an email newsletter signup on this website. If we introduce one, we will explain the provider, information collected, subscription choices, and how to unsubscribe before you sign up.
How long information is kept
We keep personal information for as long as needed for the purpose for which it was collected, including resolving an enquiry and any applicable legal or record-keeping requirements. For correspondence, this depends on the nature of the conversation, any continuing relationship, and whether information is needed for a legal claim.
Technical information held by infrastructure providers is subject to the relevant service configuration and provider retention practices. This website does not apply a single fixed retention period to every provider’s records. You can ask us about retention for a particular enquiry or category of information.
Your choices and rights
Subject to the conditions in applicable law, you may request access to your personal data, correction, erasure, restriction of processing, or data portability. You may object to processing based on legitimate interests for reasons relating to your situation. Where processing relies on consent, you may withdraw that consent without affecting processing already carried out.
Send a request to support@ovrlab.io. We may need proportionate information to verify that the request comes from the person concerned. We will respond within the period required by applicable law.
You may complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or another competent supervisory authority, including the authority where you live or work. You do not need to contact us first.
We do not use this website to make solely automated decisions about visitors that produce legal or similarly significant effects.
Changes to this notice
We will update this notice when the website’s data practices change and revise the date above. We will provide further notice or obtain consent where required. Updating this website notice does not replace a separate product’s privacy notice.
For privacy questions, contact support@ovrlab.io. Our website terms of use explain how the website and its material may be used.