Privacy
Privacy notice for this website
This page covers the website only. It is independent from the scientific privacy framework that will govern the pilot's clinical data (described under How it works and Regulatory status).
The short version
- This site does not use cookies and does not display advertising.
- We use GoatCounter, a privacy-friendly, cookieless analytics tool, to count page visits. No IP address is stored, no visitor is tracked across sites, and no personal data is collected (see "Analytics" below).
- No other personal data is collected by us through the site, except via the contact form (see below).
- The site is hosted on GitHub Pages (GitHub, Inc., USA), which logs visitor IP addresses for abuse protection.
- The contact form is delivered by Web3Forms (a third-party form-to-email relay) so that the team's email addresses are never exposed on the site.
- Fonts are self-hosted: no request is made to Google Fonts or any third-party CDN.
- Patient data is not on this site. The clinical project follows a separate GDPR/APPI framework, still under IRB/DPIA review — no patient data has been processed to date.
What the site collects
Directly: only aggregated visit counts via GoatCounter (see "Analytics"
below). No cookies are set. The only client-side storage we use is a localStorage
key named canal-ai.lang that remembers your chosen language (en,
ja, or fr). It contains no personal data and is deleted if you clear
your browser's site data.
The contact form, when you submit it, sends the fields you entered (name, email, optional subject, message) to Web3Forms (see "Third-party requests" below) which relays them by email to the team. The data is not stored on this site; we do not save it to a database or to GitHub.
Hosting and logs
The site is served by GitHub Pages. GitHub, Inc. keeps short-term access logs (including visitor IP addresses) for security and anti-abuse purposes. See GitHub's privacy statement. We do not receive or use those logs.
Third-party requests made by the site
- When you click an external link (ORCID, LinkedIn, a partner's website, SECOM, FedBioMed, the GitHub repo), your browser contacts that third party directly. Their privacy policies apply.
- Analytics (GoatCounter). Each page load triggers one HTTPS request to GoatCounter (operated by Arp242 B.V., the Netherlands; servers in Germany — Hetzner, Falkenstein) to record an aggregate page-view counter. No cookies are set; your IP address is not stored (it is used only momentarily, together with your browser's User-Agent and a server-side daily-rotating salt, to compute a one-way hash that de-duplicates same-day visits, then immediately discarded). Country (derived from IP before discard), browser, operating system, screen size, and the referring page are recorded in aggregate form. Visitors are not tracked across sites and no profile is built. See the GoatCounter privacy policy. Data is hosted in the EU, which Japan's Personal Information Protection Commission recognises as offering an adequate level of data protection (APPI Article 28 white-list).
- Contact form (Web3Forms). When you submit the contact form on the home page, the form data (name, email, optional subject, message) is sent over HTTPS to Web3Forms, which relays the message by email to the team. The team's email addresses are configured in the Web3Forms dashboard and never appear on this website. Web3Forms processes the submission as a sub-processor on our behalf; see the Web3Forms privacy notice and terms. We do not store form submissions on this site or in our repository.
Named individuals on the site
The site lists the principal investigators (Dr Charles Dolladille, Dr Basile Chrétien, Dr Kazuki Nishida) and the colleagues in the Acknowledgements section. Anyone listed who wishes to be removed can email the team via the Contact section and we will remove the entry promptly.
Your rights
Under the EU GDPR and the Japanese APPI, you have the right to ask what personal data (if any) we process about you, to have inaccurate data corrected, and to ask for deletion. Those rights apply to (a) your name if you are listed in the Acknowledgements, (b) any correspondence you initiate with the team, and (c) form submissions you have sent via the contact form. To exercise them, contact the team via the Contact form on the home page.
Changes to this notice
If we add any form, analytics, or embedded third-party content, this page will be updated and the change will be visible in the Git history of the public repository.