Skip to content

Privacy Policy

Scope and operator

This policy covers https://en.papernotes.org/, the English edition of AI Paper Notes (the “Site”).

  • Operator / data controller: Yang, an individual operating AI Paper Notes.
  • Privacy contact: [email protected]. Do not submit private information through public GitHub issues.
  • Last updated: September 19, 2026. This version applies when published on the Site.

This policy explains the Site's own practices and identifies external services. Those services may also process information under their own privacy policies.

Information processed when you visit

The Site provides publicly accessible research notes. Browsing does not require a Site account. Loading pages involves requests to hosting, security, analytics, and other service providers. Depending on the service, these requests may include your IP address, browser and device information, requested URL, referring page, request time, and technical or security information.

Information you voluntarily include in a privacy request may be processed to respond to that request. Please provide only what is necessary and do not send passwords, payment information, or other sensitive information.

Hosting, delivery, and security

The Site is hosted using GitHub Pages and uses Cloudflare for delivery and security. These providers process technical request information to deliver pages, maintain availability, and detect abuse. Any security cookies or browser storage used by these services are separate from advertising preferences.

Audience measurement

The Site integrates Cloudflare Web Analytics to understand page usage and performance. Cloudflare describes this product as cookieless analytics. That does not mean that visiting the Site creates no network requests or that other services on the Site do not use cookies.

See Cloudflare Web Analytics and Cloudflare's privacy information.

Google advertising and cookies

The English edition integrates Google AdSense. Google and other advertising vendors may use cookies, local storage, identifiers, IP addresses, and information about visits to this and other websites to deliver and measure advertising, limit repetition, and prevent fraud. Where the required consent is obtained, this information may also be used to personalize advertisements.

Google's advertising cookies enable Google and its partners to serve ads based on visits to the Site and other websites. Declining personalized advertising does not necessarily eliminate all advertisements or all technical processing. Non-personalized advertising may still involve cookies or other storage for functions such as measurement or fraud prevention, subject to applicable consent requirements.

The Google consent message provides information about advertising partners and purpose-specific choices. Partner participation and processing depend on the actual advertising configuration and your choices.

For visitors in the European Economic Area, the United Kingdom, and Switzerland, Google's EU user consent policy requires disclosures and consent for cookies or local storage where legally required, and for the collection, sharing, and use of personal data for advertising personalization.

The Site uses a published Google AdSense European regulations message for applicable visitors. Use the choices in that message to accept or decline consent, or manage individual options. Availability and wording depend on your location and the message presented by Google.

For applicable visitors, the footer's Privacy and cookie settings button becomes available when Google's consent interface is ready. Select it to reopen the European regulations message and change or withdraw your consent using its choices. Withdrawal does not affect processing lawfully carried out before withdrawal.

If the button is unavailable or the message cannot open, the consent interface may not have loaded or may not apply to your visit. Contact [email protected] with the page URL and a description of the problem, without sending cookies or other identifiers. Sending an email or reading this policy does not itself change your browser's advertising consent.

For visitors covered by applicable US state regulations, Google provides a Do not sell or share my personal information entry point with its US state regulations message. Use that interface to manage the relevant opt-out choices. Availability and wording depend on your location and the applicable message.

You can also manage or delete cookies through your browser. Clearing cookies may remove saved preferences and cause a consent request to appear again. Browser controls and Google's advertising controls do not replace the Site's obligation to provide a working consent and withdrawal mechanism.

The Site's local search uses an index downloaded from the Site and searches it in your browser. Search terms can appear in the search-page URL and browser history; URLs may also reach infrastructure or analytics providers. Do not enter confidential information in search queries.

Some search controls open Bing. When you use those controls, your query is sent to Microsoft. See the Microsoft Privacy Statement.

Some pages load MathJax from cdnjs, a Cloudflare-operated CDN, to display mathematical notation. Pages with Mermaid diagrams load the Mermaid library from unpkg.com. Loading these resources sends requests to their providers, including technical connection information.

Links to papers, repositories, and other websites take you to services operated by third parties. Their privacy practices apply when you visit them.

Where GDPR or comparable law applies, we rely on legitimate interests in delivering and securing the Site and responding to correspondence, and on legal obligations where processing is required by law. We rely on consent for advertising personalization and for cookies or similar storage where applicable law requires it. A legitimate-interest basis is not a substitute for consent where consent is required.

Information may be processed by the hosting, security, analytics, advertising, and external-resource providers described above. Some providers operate internationally and may process information outside your country. Their privacy notices describe their processing locations and applicable transfer safeguards.

Retention

Service-provider retention varies by purpose and is described in their privacy documentation. Browser cookies and stored preferences may remain until they expire or are deleted.

We retain ordinary correspondence, including privacy and rights requests, for no more than 12 months after the matter is closed, then delete it. Information needed for an ongoing dispute or a legal obligation may be retained longer for that purpose and deleted when it is no longer needed. This period applies to correspondence under our control, not to independent service-provider logs or public GitHub Issues, which are subject to the relevant provider's policies. Please do not post private information in public issues.

Your rights and requests

Depending on your location and the applicable law, you may have rights to access, correct, delete, or receive a copy of personal data; restrict or object to processing; and withdraw consent. These rights may be subject to legal exceptions. You may also complain to your local data-protection authority.

Contact [email protected] to make a private request. Verification may be needed to protect your information, but requests should not include unnecessary sensitive documents. Requests about data controlled independently by Google, Cloudflare, GitHub, or Microsoft may also need to be directed to the relevant provider.

Changes to this policy

This policy may be updated when the Site's services or practices change. The last-updated date identifies the version published on the Site. Where required, material changes to consent-based processing will require renewed notice or consent.