What we collect—and what we do not.

Who is responsible.

SMQ Capital OÜ (registry code 16681723), Tornimäe tn 7-3, 10145 Tallinn, Estonia, is the controller of personal data described in this policy. Contact us at business@smq.capital.

Delivery and security.

When you visit Anabiotica, our hosting provider Cloudflare processes technical request data such as your IP address, requested URL, browser and device information, timestamps, and security signals. This is necessary to deliver the site, prevent abuse, and maintain reliability. Our legal basis is our legitimate interest in operating a secure and available publication (GDPR Article 6(1)(f)).

For source-form rate limiting, Cloudflare temporarily uses the requesting IP address as a counter key. The IP address is not stored with the submitted source.

Small, cookie-free analytics.

If you arrive through a link containing UTM campaign parameters, we store the landing-page path and the link’s source, medium, and campaign values. We do not add an IP address, cookie, or unique user identifier to this dataset. We use it to understand which outreach brings readers to the publication, based on our legitimate interest in measuring our communications (GDPR Article 6(1)(f)). Cloudflare Analytics Engine retains these records for three months.

Information you choose to send.

When you submit a source, we store its title and URL, any optional email address and note you provide, the submission time, and its review status. We use this information to review the source, prevent duplicate submissions, and contact you about it if needed. Our legal basis is our legitimate interest in running a source-first editorial process and responding to submissions (GDPR Article 6(1)(f)). Do not include health information or other sensitive personal data in the notes field.

When you contact us.

We process your email address, message, and related correspondence to answer you and keep a record of the enquiry. The legal basis is our legitimate interest in handling correspondence (GDPR Article 6(1)(f)), or taking steps at your request before entering a contract where relevant (Article 6(1)(b)).

Who can process the data.

Access is limited to people working on Anabiotica who need it for the purposes above. Cloudflare, Inc. provides our website delivery, security, rate limiting, database, and attribution infrastructure as a processor. Our email provider processes correspondence sent to us. We may also disclose information where required by law or needed to establish, exercise, or defend legal claims.

Cloudflare and its subprocessors may process data outside the European Economic Area. Cloudflare’s Data Processing Addendum uses applicable adequacy mechanisms and the EU Standard Contractual Clauses for restricted transfers.

How long we keep it.

• Campaign-attribution records are kept for three months.
• Source submissions are kept while they are under review. We may keep the source, submission status, and editorial notes while they remain relevant to our publication or duplicate-prevention records. Optional contact details are removed when they are no longer needed.
• Correspondence is kept only as long as needed to handle the enquiry and any applicable legal, accounting, or claims requirements.

No advertising or analytics cookies.

Anabiotica does not set cookies for advertising or audience analytics. Cloudflare may set strictly necessary security cookies when required to protect the site. A strictly necessary, 12-hour admin-session cookie is issued only to an authorized editor who logs into the private administration area.

You stay in control.

Under the GDPR, you may have the right to access, correct, erase, or restrict the processing of your personal data, receive portable data, and object to processing based on legitimate interests. Email business@smq.capital to exercise a right. We may ask for enough information to verify your identity and will normally respond within one month.

You may also lodge a complaint with the Estonian Data Protection Inspectorate or the supervisory authority where you live or work.

No automated decisions.

We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects. We will update this page when our processing changes and show the new date at the top.