Privacy policy
Who is responsible
Juryline is operated by Everlong s.r.o., Zámocká 8, 811 01 Bratislava, Slovakia, company ID 55 271 987, registered in the Commercial Register of the Municipal Court Bratislava III, section Sro, insert 167806/B, e-mail hello@juryline.com.
There are two roles:
- Data in programmes (applications, files, scores, jurors' details, messages) belongs to the organiser that runs the programme. The organiser is the controller and decides what is collected and why. We process this data only on the organiser's behalf under our data processing agreement. For questions or requests about an application, contact the organiser; the call page links to its privacy notice.
- Data about accounts, organisations, billing, support and security is processed by us as the controller. This policy describes that processing.
What we process and why
Accounts
E-mail address, name if you give it, preferred language, times of sign-in and the organisations, programmes and roles you belong to. Purpose: to let you sign in and use Juryline. Legal basis: contract (Art. 6(1)(b) GDPR). We keep your account while you use Juryline. You can ask us to delete it at any time; data in programmes then stays with the organisers as their records.
Organisations and billing
Organisation name, country, VAT ID, billing address and e-mail, purchases, invoices and, for public bodies, contracts and the name and position of the signer. Purpose: to sell plans, issue invoices and keep accounting records. Legal basis: contract and legal obligation (Art. 6(1)(b) and (c)). Invoices and accounting records are kept for 10 years under Slovak accounting law. Card payments are handled by Stripe; we never see full card numbers.
Support and feedback
Messages you send us, also through the feedback form (with the page you came from and your e-mail address if you give it), and our replies. Purpose: to help you. Legal basis: contract or legitimate interest (Art. 6(1)(b) or (f)). Kept up to 24 months after the request is closed.
When you ask for help with a programme, our support may open your organisation read-only for 2 hours with a recorded reason. Every such session is listed for your organisation in its settings and recorded in the audit log.
Security and the audit log
Records of important actions such as exports, protocol downloads, role changes, support sessions and billing events, with who did it and when, but without the content of applications. Purpose: security, accountability and proving how results came about. Legal basis: legitimate interest (Art. 6(1)(f)). Kept 24 months.
Server logs at our hosting provider (IP address, time, requested address) for a short period. To slow down abuse we count requests per pseudonymous key derived from an IP address or e-mail address and delete the counts after 2 days.
When a page fails on our server or in your browser, we record the error message, the page, the time, the browser and, if you are signed in, your account ID, so we can fix the problem. Legal basis: legitimate interest (Art. 6(1)(f)). Kept 90 days.
Visit statistics
To see how many people visit Juryline and which pages help them, we count page views ourselves, without cookies and without storing anything in your browser. For each page view we keep the page (without identifiers in its address), the site you came from, campaign tags in the link, your country (derived from the IP address by our hosting provider), the kind of device and a visitor code. The visitor code is a hash of your IP address and browser made with a key that changes every day and is then deleted, so we can count a visitor within one day but cannot recognise you on another day or find out who you are. We do not store your IP address for this. Robots and browsers that send a Do Not Track or Global Privacy Control signal are not counted. Legal basis: legitimate interest in improving Juryline (Art. 6(1)(f)). Page views are deleted after 13 months.
E-mails we send
Sign-in codes, invitations, confirmations, reminders and results e-mails. We keep a log with recipient, subject and status: for programme e-mails as long as the programme, for other e-mails 12 months.
Audience voting at live events
To allow one vote per device, the voting page stores a random identifier in your browser. We store only a keyed hash of it. If the organiser asks for an e-mail code, we store a keyed hash of your e-mail address, not the address.
AI
When an organiser creates a programme from a call text, that text is sent to Anthropic (Claude) to draft a form. Applications, scores and other data from programmes are never sent to AI.
Cookies and browser storage
We use only what is needed for Juryline to work, so no consent banner is needed. There are no analytics, advertising or tracking cookies; our visit statistics use no cookies and store nothing in your browser.
| Name | What it is for | How long |
|---|---|---|
| lang | Remembers your language | 1 year |
| sb-…-auth-token | Keeps you signed in | 30 days |
| sb-…-auth-token-code-verifier | Protects the sign-in from tampering | Until sign-in is complete |
| jl-device (browser storage) | One vote per device at a live finale | Until you clear your browser data |
Who receives data
We use these providers. They process data on our instructions under data processing agreements.
| Provider | What it does | Where data is | Safeguards |
|---|---|---|---|
| Supabase, Inc. (USA) | Database, sign-in, file storage | EU (Frankfurt, Germany) | Data processing agreement, standard contractual clauses |
| Vercel Inc. (USA) | Hosting of the app | EU (Frankfurt, Germany) | Data processing agreement, standard contractual clauses, EU-US Data Privacy Framework |
| Resend (Plus Five Five, Inc., USA) | Sending e-mails | Sending from the EU (Ireland); delivery logs in the USA | Data processing agreement, standard contractual clauses, EU-US Data Privacy Framework |
| Anthropic, PBC (USA) | AI draft of a form from an organiser's call text; never applications or scores | USA | Data processing agreement, standard contractual clauses |
We also use Stripe Payments Europe, Ltd. (Ireland) for card payments and SuperFaktúra (Slovakia) for invoices. Transfers outside the EU rely on the EU-US Data Privacy Framework or standard contractual clauses (Art. 45 and 46 GDPR).
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict processing, to data portability and to object to processing based on legitimate interest. Write to hello@juryline.com. We reply within one month. For data in a programme we forward your request to the organiser and help them answer it.
You may also complain to the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk, or to the authority in your country.
We do not make decisions about you based solely on automated processing. Rankings in Juryline are calculated from jurors' scores; the decisions are made by people at the organiser.
Version of 30 October 2026.