Privacy Policy

Version 2026-08-23 · Controller: ConsultSciences (https://www.consultsciences.com)

1. Summary

The Citation Nebula Map works without accounts, sign-ups, or server-side user data. We do not run analytics or advertising. The only data stored is a single browser-local record of your consent choices.

2. What we collect

• No personal data is transmitted to us. There are no forms, no logins, no telemetry endpoints, no server-side logging of your interactions with the map.
• Local storage (strictly necessary): key nebula-consent-v1 storing {v, analytics, termsVersion, acceptedAt}. Purpose: remember that you acknowledged the Terms & Privacy Policy, confirmed age 16+, and chose an essential-only vs accept-all cookie level, so we are not legally required to re-ask on every visit. Lawful basis: GDPR Art. 6(1)(c) legal obligation (consent proof) and Art. 6(1)(f) legitimate interest ( remembering your choice). Retention: until you clear it via “Cookie settings” → re-choice or browser data clearing. It never leaves your device.
• Cookies: the Service sets none — no essential cookies, no third-party cookies.

3. External requests

• unpkg.com CDN: three.js 0.160.0 and JSZip 3.10.1 are loaded from the unpkg.com content delivery network because they are strictly necessary for the core visualisation and export features. Like any web fetch, unpkg (and its CDN providers) technically see your IP address and user agent. No identifiers, cookies, or query strings about you are sent.
• doi.org: only when you click “Open Paper” does your browser navigate to doi.org / the publisher. That is an ordinary outbound navigation initiated by you; nothing is preloaded or tracked by us.
• Corpus downloads (“Bake Static JSON”, “Download Corpus ZIP”): generated entirely on your device as local Blob downloads; no network request occurs.

4. Optional tracking status

Today there are no optional trackers, so choosing “Essential only” vs “Accept all” changes nothing functionally. If we ever add optional analytics, they will be wired exclusively behind the consent gate (initOptionalTracking()) and will load only after an explicit “Accept all”, revocable anytime via the footer “Cookie settings” link.

5. Your rights (GDPR)

You have rights of access, rectification, erasure, restriction, portability, and objection under the GDPR. Because all stored data lives in your own browser, you can exercise erasure/portability directly: clear site data in your browser settings, or export the single consent record from developer tools. For any privacy question contact ConsultSciences via www.consultsciences.com.

6. International transfers & breaches

CDN requests may be routed through servers worldwide by the CDN operator. As we store no personal data centrally, a breach of our infrastructure cannot expose your personal data; issues can be reported via the contact above.

7. Changes

Material changes to this policy bump the version date above; returning visitors re-acknowledge via the consent gate. See also our Terms & Conditions.