Privacy policy
What Noosphere knows about you, why it knows it, how long it keeps it and who else sees it. Written to be read, not to cover our backs.
Last updated: 30 September 2026
1. Start with what we do NOT do
It is shorter than the list of what we do, and it explains the rest:
- There is no analytics. No Google Analytics, no pixels, no third-party measurement scripts. The site's content security policy blocks them even if someone slipped one in by mistake.
- There is no personalised advertising and no sharing of data with advertisers. If there are sponsors one day, they will see aggregate figures, never people.
- Data is never sold or shared with anyone, under any circumstances.
- There is no profiling and no automated decisions with legal effects on you.
- Fonts and libraries are served from our own domain, precisely so that loading a page does not send your IP address to Google or to any CDN.
- We never see your card. Payment happens entirely inside Stripe.
2. Data controller
| Controller | Raúl del Pino |
| Address | La Oliva (Las Palmas), Spain |
| Contact | noosphere@psiconautica.org · rauldelpino@gmail.com |
3. What we process, what for, and on what basis
| Data | Purpose | Legal basis |
|---|---|---|
| Email address | Identify you, let you sign in, and tell you about your account and subscription | Performance of a contract (art. 6(1)(b) GDPR) |
| Name (optional) | Greet you by name in the interface and in emails | Legitimate interest (art. 6(1)(f)) |
| Password | Protect your account. Stored hashed with scrypt and a per-user salt: nobody, not even the administrator, can read it | Performance of a contract |
| Plan, billing period, status and Stripe identifiers | Manage the subscription, its renewals and its cancellation | Performance of a contract |
| Number of queries per day | Apply your plan's daily quota | Performance of a contract |
| Conversation history (with an account, on every plan) | So you can return to an earlier chat and pick it up where you left off. Your questions, the answers and the sources cited are stored. You can delete any conversation whenever you like, and the deletion is real, not a flag. How long it lasts depends on the plan: see section 5 | Performance of a contract |
| Conversation in progress (without an account) | So that a follow-up question knows what was being discussed. Without an account there is no history: the server only keeps the last turns of the conversation in progress, tied to a random identifier in the session cookie and to nothing else | Legitimate interest (art. 6(1)(f)) |
| IP address | Contain abuse: limits on queries, sign-ups and login attempts. Your IP is never stored as such. Per-minute limits live only in the server's memory and are gone on restart; so that the daily free-trial quota survives a restart, we store an irreversible fingerprint of the IP, computed with a secret key that changes every day and is destroyed the next: after those hours the fingerprint can no longer be tied to any IP | Legitimate interest — security (art. 6(1)(f)) |
| Query text, with no user attached | Know what people ask so the corpus can improve. We keep the text (up to 400 characters), the language and how many sources were used, with no link at all to your account, your session or your IP. We also keep each query's translation into the corpus's other language (Spanish or English), just as anonymous, so it does not have to be requested again | Legitimate interest — service improvement (art. 6(1)(f)) |
| New-research alerts (with an account) | Send you, at most once a week, an email with what has come in on the topic you chose. We keep the topic, the filters and the date of the last notice. To search, the topic is translated by the language-model provider, without your email or any data about you. Every email carries a link to unsubscribe without signing in | Your request when creating the alert (performance of the contract, art. 6(1)(b)) |
| Web server access logs | Security and fault diagnosis. Written by the web server, not by the application, and never cross-referenced with an account | Legitimate interest (art. 6(1)(f)) |
We do not ask for, and do not need, your date of birth, postal address, phone number or country.
4. What you type into the question box
Even so, the advice is plain: do not put health data — yours or anyone else's — or anything that identifies you into a question. Ask about "the interaction between sertraline and MDMA", not "I have been on sertraline since March and I want to try MDMA".
If you do include health data anyway, it is processed only to answer you, on the basis of your explicit request (art. 9(2)(a) GDPR). If you have an account, it is stored in your own history — 30 days on Free and Normal, with no expiry on Premium — which you can delete at any time; without an account, the server only keeps the last turns of the conversation in progress, for 24 hours.
5. How long we keep it
| Data | Retention |
|---|---|
| Account and subscription | As long as the account exists. Deleting it deletes them |
| Chat history (with an account) | Free and Normal: 30 days from the last message of each conversation, deleted automatically every night. Premium: no expiry, until you delete it or delete your account; if you leave Premium, the 30-day period applies. On every plan the 200 most recent chats are kept at most: starting another one deletes the oldest |
| Conversation in progress (without an account) | 24 hours from the last message, deleted automatically every night |
| Query counter | As long as the account exists |
| Anonymous query text and its translations | 60 days, deleted automatically every night |
| New-research alerts | Until you delete the alert (from your account or with the unsubscribe link in the email) or delete your account |
| IP address | Not stored. Its irreversible fingerprint, 24 hours maximum; the key that could recompute it is destroyed every day |
| Web server logs | Whatever the hosting provider's automatic rotation sets: weeks, not years |
| Billing | The mandatory tax and commercial periods (up to 6 years). Held by Stripe as the issuer of the charges |
| Backups | 5 days. Deleted data may survive in a backup until that backup rotates out |
6. Who else sees your data
Only the providers this cannot run without. None of them uses it for anything else:
| Provider | What for | What it receives | Where |
|---|---|---|---|
| Stripe | Charging subscriptions and donations | Your email, an internal identifier and the plan. Card details are collected by Stripe directly: they never touch our server | Ireland / USA |
| Brevo | Sending account emails (verification, password, notices) | Your email address and the content of the message | European Union |
| Language model providers Google (Gemini) as primary and, if it fails, OpenRouter — which in turn routes to other providers — OpenAI and Groq |
Writing the answer, translating the question and rewriting follow-up questions | The question text and the document passages. No identifier of yours | USA and other third countries |
| Hosting | The server everything runs on | Whatever appears in the access logs | European Union |
What stays at home. The engine that turns text into vectors and the one that re-ranks the results run on our own server. Your question does not leave the building to be searched: it only leaves to be written up.
7. International transfers
Some of those providers sit outside the European Economic Area. Those transfers rely on the safeguards in Chapter V of the GDPR — standard contractual clauses or an adequacy decision, depending on the provider — and are limited to what the table above describes. Remember that model providers receive no data that identifies you.
8. Your rights
At any time, and free of charge, you may exercise your rights of access, rectification, erasure, objection, restriction and portability. Just write to noosphere@psiconautica.org from your account's address. We reply within one month at most, usually within days.
- Deleting your account removes your record, your subscription, your usage counter and your entire chat history. If you have an active subscription, cancel it first from My account.
- The anonymous query text cannot be linked back to you, so it cannot be located or deleted individually either. It disappears on its own after 60 days.
- If you think we have got something wrong, you can complain to the Spanish Data Protection Agency (aepd.es). We would appreciate hearing about it first.
9. Security
- The whole site runs over HTTPS.
- Passwords are stored with scrypt and a unique salt per user. They are unrecoverable by design: if you lose yours it is reset, not retrieved.
- Your session travels in a signed cookie the server verifies on every request. Changing your password invalidates every open session. Details are in the Cookie policy.
- The database and the graph are backed up daily.
- No system is infallible. Were a breach to occur with risk to your rights, you would be told and the Agency notified within the 72 hours set by article 33 GDPR.
10. Minors
Noosphere is restricted to people aged 18 or over and is not aimed at minors. We do not knowingly collect data from minors; if we find an account belonging to one, it is deleted.
11. Changes to this policy
If something material changes — a new provider, a new purpose — this page is updated, and if the change genuinely affects you, account holders are told by email.
How to verify and cite · Corpus fact sheet · Method and limitations