Privacy

This central information covers the Extraara websites, including ExtraProof.

On this page

Controller and contact

Erik Lelek, trading as Extraara, Marieberg 184 H, 872 96 Bjärtrå, Sweden, is responsible for personal data. Contact [email protected] with privacy questions.

Visiting the websites

Technical connection data, such as IP address, time, requested page and browser information, is needed to deliver the pages and maintain operation and security. This is based on our legitimate interest in a secure, functioning website under Article 6(1)(f) GDPR.

Hosting and service providers

The website is hosted on our server with Contabo in France. Contabo supplies the infrastructure and processes necessary data on our behalf under a data processing agreement.

Cloudflare delivers and protects the website. It processes IP addresses, requested URLs, times and technical connection information. Its global network may process data outside the EU and EEA, including in the United States.

Cloudflare’s data processing agreement describes international transfer safeguards, including the EU–US Data Privacy Framework for covered transfers and EU standard contractual clauses. See also its privacy policy. You may request information about applicable safeguards from us.

Technical logs

Our webserver logs support troubleshooting, operation and investigation of malicious requests. They rotate daily, with at most 14 archived log files retained. Information needed to investigate a specific security incident may be kept separately until that investigation ends.

These details concern our own server logs. Cloudflare’s retention depends on the service, security needs and legal obligations described in its privacy policy.

Contacting us

We operate our own email service. We use your email address, message and voluntary information to answer and handle your enquiry. Contact with business representatives is based on our legitimate interest in handling business enquiries under Article 6(1)(f) GDPR. For a contract with you as an individual, Article 6(1)(b) may apply.

We retain information while needed to handle the matter and then delete it unless a legal retention duty applies. Access is limited to people who need it for their work.

Contact form, cookies and analytics

Optional website statistics with self-hosted Matomo require affirmative consent and use no analytics cookies. The choice can be changed at any time in Statistics settings. See “Optional website statistics” in this privacy policy. We use no advertising or marketing tracking. Fonts and images are served from our own website address.

Contact links lead to the central Extraara form. It uses a necessary session cookie for at most 30 minutes and self-hosted ALTCHA protection without additional cookies or behavioural profiles. Form information becomes an enquiry in our own support system so we can reply by email. Technical protection identifiers contain no message text and are removed within seven days. There is no newsletter.

Cloudflare may use technically necessary security cookies to protect against malicious requests. We do not use them for advertising.

Your rights

Under the GDPR, you may request access and correction. Subject to the applicable conditions, you may also request erasure, restriction or portability and object to processing based on legitimate interests. Contact us by email to exercise these rights.

You may complain to a competent supervisory authority. Read about your rights at the Swedish Authority for Privacy Protection.

Data use in ExtraProof

Writer stores writing sessions on your device. You can share the record together with the finished file. Verify checks received files directly in your browser. No account is required, and the selected files are not uploaded.

Word add-in: local text comparison and a DOCX copy.

The Word sidebar reads the main text temporarily for local comparisons. The event journal stores metadata and fingerprints, not raw text. On completion, the exported DOCX copy is passed to the local ExtraProof service on your device and stored there. ExtraProof does not upload it to Extraara in this workflow. Word’s own cloud features follow your Microsoft settings.

Capture activity, not the text being typed.

Writer logs coarse observations, app identifiers, sensor states and counters. Typed characters, key codes, clipboard contents, window titles and document text are not stored as telemetry. The native app requires no cloud account and does not contact the optional backend service automatically.

Moodle: submit to your institution.

For a Moodle submission, you confirm the recipient, course and activity. Only then are the document and record sent to the connected institution.

Review metadata before sharing.

Session times, key identifiers and the name of a bound file can reveal people or working patterns. Additional sealed observation can include identifiers of other running applications. Review the export and share it only with recipients who need it for the agreed purpose.

Browser verification runs in memory.

Verify checks received files directly in your browser. No account is required, and the selected files are not uploaded. “Clear selection” removes your selection and the displayed result.

Responsibility after export.

Recipients and the connected institution can store submitted documents and records. Access and retention follow your institution’s agreed submission process.

Optional offline reading

If you explicitly enable offline reading, your browser stores public ExtraProof pages and their assets on your device. Selected records and manuscripts are not included in this cache. You can remove the reading cache on the resources page.

Optional website statistics

We run Matomo ourselves and use it on extraara.de, extraara.se, extraproof.de, extraproof.se and extraproof.eu only after your affirmative consent to summarize page views. Declining is as easy as accepting. The website remains usable without statistics. Matomo is not currently integrated on extraara.eu. Without valid consent, the listed websites neither load the Matomo script nor send page views to Matomo.

We record the fixed public page path, time and technically necessary connection data. Query parameters, fragments, referrers, form values, selected files, document contents and user identifiers are not passed to Matomo. The IP address is required for the connection and is shortened before storage in Matomo. No analytics cookies are set and no advertising or cross-site profiles are created.

Your choice is stored without an identifier in this website’s local browser storage for up to 180 days. Use “Statistics: on · turn off” in the footer to withdraw immediately, or “Statistics: off · settings” to choose again. Withdrawal stops future collection; it does not undo prior processing. Your choice applies only to the current domain and is not transferred to other Extraara or ExtraProof domains. On withdrawal, Matomo may also save a technically necessary opt-out cookie for at most 180 days.

Voluntary analytics relies on your consent under Article 6(1)(a) GDPR. Device information is processed only with any required consent. Storing your privacy choice is solely necessary to respect that choice.

Individual statistics are deleted after 30 days and aggregated reports after 6 months.

Controller: Erik Lelek, trading as Extraara, Marieberg 184 H, 872 96 Bjärtrå, Sweden. Privacy enquiries: [email protected].