Privacy policy

Last updated 5 October 2026

Eureka is a browser extension that helps you read EU law on EUR-Lex, together with the Eureka service behind it and this website (eureka.legal). This policy says, in plain words, which personal data they process, why, for how long, and what you can do about it.

1. Who is responsible

The controller of your personal data is [to be filled], [to be filled].

For anything about your data, write to [to be filled] or use the contact form.

2. What the extension sends

The extension works only on EUR-Lex. It never reads or sends the content of other websites you visit. On EUR-Lex it sends the following to the Eureka service:

• An install id: a random number created when the extension is installed. It identifies the browser, not you, until you sign in.
• The acts you read: the address (URL) and CELEX number of each act you open, the language, the extension's version and, as with any connection, your IP address.
• Usage events: which parts of an act you viewed and for how long, scrolling, the links and references you clicked, the tabs and cards you opened, searches in the glossary and "go to", follows, language and settings changes, and showing or hiding the sidebar. We use them to see which features help, to find errors and to improve Eureka.
• Follows: the acts and articles you follow, which also works before you sign in.
• Your e-mail address, once you sign in, so that your follows, alerts and plan are the same in every browser you connect.
• Feedback and problem reports that you send yourself, with the e-mail address if you give one.

3. What the website stores

• A session while you are signed in: your account number, e-mail address and plan, kept in a session cookie (section 10).
• Your account in the Eureka service: your e-mail address, your plan and, if you belong to one, your organisation; your e-mail alert settings (digest and language); your follows; the notifications about the acts you follow; and your connected browsers (when each was added and last seen).
• Sign-in links and codes: one-time links e-mailed to you and the short-lived codes that connect the extension to your account.
• Messages you send through the contact form.

4. The text watermark

Texts the extension shows (parts of acts, definitions and AI evaluations) carry an invisible mark: some spaces are replaced by a non-breaking space in a pattern that belongs to your install. It does not change what you read. It lets us find out which install a copied text came from if Eureka's content is republished in bulk. The pattern is linked to the install id, and to you only through that id.

5. Request logs

The Eureka service and this website log each request: time, address requested, answer, the install id or account number, the browser's description (user agent) and the IP address. We use the logs to run the service, to keep it secure, to limit abuse and to find errors.

6. Why we process it

• To provide the service you asked for (performance of our agreement, GDPR article 6(1)(b)): showing acts, follows, alerts, sign-in and your plan.
• Our legitimate interests (article 6(1)(f)): usage events, statistics, the watermark and request logs, to improve Eureka, keep it secure and protect its content. We keep these under a pseudonym (section 7) so that they say as little about you as possible.
• Legal obligations (article 6(1)(c)), for example bookkeeping once paid plans start.

7. How long we keep it

• Page views, usage events and request logs are kept under a stable pseudonym, the install id or the account number, and not under your name or e-mail address. They are kept without a fixed time limit, because statistics and the replay of reading sessions need them.
• IP addresses are shortened after 30 days (the last part is removed), so they no longer point to a single connection.
• Sign-in links and connect codes are deleted as soon as they are used or expire.
• Your account, follows, notifications and connected browsers are kept until you delete the account.
• When you delete your account, your e-mail address, follows and notifications are deleted, your browsers are disconnected, and the pseudonym is unlinked from your e-mail address and your organisation. What remains of the history is anonymous: it can no longer be traced back to you.
• Messages sent through the contact form are kept as long as needed to answer and follow up on them.

8. Who processes it for us

• Hetzner (Germany) hosts the Eureka service, its database and this website on servers in the EU.
• Porkbun is our e-mail provider. It sends sign-in links and e-mail alerts and receives the recipient's address and the message.
• Anthropic produces the AI evaluations. It receives the published text of acts only, never data about users.
• EUR-Lex and the Cellar of the Publications Office of the EU are the source of the acts. The service fetches acts from them; it sends them no data about you. The extension runs on EUR-Lex pages, so EUR-Lex's own privacy statement applies to your visit there.

We do not sell personal data and do not share it with anyone else, unless the law requires it. When paid plans start, the payment provider will be added to this list before any payment is taken.

9. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to access your data, to have it corrected, to have it deleted, to restrict or object to its processing, and to receive it in a portable form. You can:

• see and change your e-mail alerts, follows and connected browsers, and delete your account, on the account page;
• uninstall the extension, which stops it sending anything;
• ask for anything else at [to be filled] or through the contact form. We answer within one month.

You can also complain to a data protection authority, in Denmark Datatilsynet (datatilsynet.dk), or the authority where you live or work.

10. Cookies

This website sets one cookie, the session cookie, and only when you sign in or use a form (together with the security cookie that protects forms against forgery). It ends when you sign out or after two weeks. There are no analytics, advertising or tracking cookies, and no third-party scripts that track you.

11. Changes to this policy

When Eureka starts to process data in a new way, we update this page and its date first. We may also announce important changes in the extension or by e-mail.