Cloudflare
Services used: Authoritative DNS, Reverse proxy, CDN, and traffic delivery, Network security and abuse protection, Privacy-address email routing
Provider privacy noticeWho is responsible for your data?
Beyond Tabs is a personal, non-profit project. The person below is the data controller for personal data processed by the site.
- Data controller
- Andrea Mancuso
- Based in
- Poland
- Privacy contact
- [email protected]
Personal data we process
You can browse public job listings and resources without creating an account or giving Beyond Tabs your name or email address.
- Website requests and security logs
- The hosting, network, and application infrastructure may process or record an IP address, traffic-routing data, request time, requested page, response status, system configuration information, and basic browser or device information. These records are used only to deliver, secure, and troubleshoot the service.
- OAuth identity
- If you sign in with GitHub or Discord, Beyond Tabs stores the provider name, your provider user ID, and your provider username. The provider may return other profile fields during sign-in, but Beyond Tabs does not retain them as part of your OAuth identity. Beyond Tabs does not request your email address.
- Account and preference data
- Beyond Tabs stores an internal account ID, role and status, account timestamps, followed languages, saved jobs, seen or hidden job state, and any optional job-alert preferences you choose to configure.
- Job suggestions
- If you suggest a job, Beyond Tabs stores the listing URL, your optional note, your account ID, a technical submission ID, submission time, private review status, and any link to an internal Job Lead. Site editors can see your suggestion and note, and they are included in your account export. A suggestion is reviewed before any listing could be published.
- Authentication records
- To keep you signed in securely, Beyond Tabs handles session identifiers and records such as token hashes, issue and expiry times, and revocation information. OAuth authorization codes and provider access tokens are used to complete sign-in and are not stored as account profile data.
- Job reports
- If you report a published job, Beyond Tabs stores the job ID, issue category, private explanation, account ID, technical request ID, receipt times, and editorial outcome. Editors can read the evidence and record a private review note. Your account history shows only the outcome and current public job availability. Your export includes your remaining explanation and receipt, without private editor notes or reviewer identity.
- Helpful resource suggestions
- If you suggest a helpful language resource, Beyond Tabs stores the suggested language, resource kind, submitted title and URL, optional private evidence, your account ID, technical request and replay fingerprints, receipt times, and editorial outcome. Editors review duplicates and suitability and may record a private review note. Submission alone publishes nothing. Editors deliberately choose public wording and placement; private evidence is not automatically copied into a public resource. Your receipt shows the outcome and current public availability. Your export includes your remaining submitted evidence and receipt, without editor notes or reviewer identity.
- Event suggestions
- If you suggest an event, Beyond Tabs stores the submitted URL, selected languages, account ID, technical request and replay fingerprints, receipt times and editorial outcome. Editors verify the source and deliberately author public event details and final language placement. Submission alone publishes nothing. Your receipt shows the outcome separately from current public availability. Export includes your remaining URL and language selections, without private editor notes or reviewer identity.
- Project suggestions
- If you suggest an open source project, Beyond Tabs stores the submitted URL, selected languages, optional private missing-language hint, account ID, request and replay fingerprints, receipt times and editorial outcome. Editors verify identity and deliberately author public project metadata and final language placements. Submission alone publishes nothing. The hint creates no language or separate request. Your receipt shows the outcome separately from current public availability. Export includes your remaining evidence and hint, without private editor notes or reviewer identity.
- Privacy correspondence
- If you contact the privacy address, Beyond Tabs processes your email address, message content, and related correspondence so the request can be understood and answered. The email-routing and mailbox providers involved in delivering that message also handle this data.
Why we process it and the legal bases
- Provide the site and optional account features
- Processing is necessary to provide the service you request, including sign-in, followed languages, and saved or hidden job state (GDPR Article 6(1)(b)).
- Review optional job suggestions
- If you choose to suggest a job, the listing URL, optional note, account ID, submission ID, and private review record are used for Beyond Tabs' legitimate interests in reviewing contributions, preventing repeated pending submissions, and maintaining a useful editorial queue (GDPR Article 6(1)(f)). You may object to this processing by contacting the privacy address.
- Protect and maintain the service
- Limited technical and authentication data is processed for the legitimate interests of preventing abuse, maintaining security, and diagnosing failures (GDPR Article 6(1)(f)).
- Meet legal obligations
- Data may be processed where necessary to respond to data-protection requests or comply with another binding legal obligation (GDPR Article 6(1)(c)).
GitHub and Discord sign-in
Signing in redirects your browser to the provider you select. GitHub is asked for read:user access and Discord is asked for identify access. The provider processes your visit and authorization under its own privacy terms. Beyond Tabs receives the authorization result and the profile information described above.
Cookies and storage on your device
Beyond Tabs does not use advertising cookies or analytics trackers. The session cookie is necessary for the requested security and account functionality, so it is not presented as an optional consent choice.
- Session cookie
- The site uses a first-party session cookie for security controls and, if you sign in, to associate your browser with your authenticated session. It is not used for advertising, cross-site tracking, or analytics.
- Theme preference
- If you use the theme switcher, your light or dark theme choice is saved in your browser's local storage. It remains on that device until you change it or clear the site's stored data.
How long data is kept
- Account data
- OAuth identity, account details, and preferences are kept while your account exists. Deleting your account removes the account and its associated identities, preferences, and authentication records, unless a limited record must be kept to meet a legal obligation.
- Job suggestions
- Pending and reviewed job suggestions are kept while your account exists so the editor can review them and avoid repeated submissions. They are included in your account export and removed when the account is deleted. A separately created Job Lead may remain as an editorial record after your account is deleted, without your account identity or private note.
- Authentication data
- A Beyond Tabs access token is valid for no more than 12 hours. Server-side session data expires or is cleaned up automatically. Authentication records may remain until account deletion unless removed earlier by maintenance.
- Job report evidence and receipts
- Evidence is kept while a report awaits review. The private explanation and editor note expire 90 days after resolution and are removed by maintenance. Receipts and replay fingerprints remain until account erasure. Erasure removes your report evidence and receipts and scrubs any private review notes you authored on reports retained for other accounts.
- Resource suggestion evidence and receipts
- Submitted title, URL, optional evidence and editor note are kept while the suggestion awaits review and expire 90 days after resolution. Maintenance removes expired evidence; receipts and replay fingerprints remain until account erasure. Erasure removes your private evidence and receipts and removes private review notes you authored on suggestions retained for others. An independently edited public resource can remain after submitter erasure; it carries no individual submitter attribution.
- Event suggestion evidence and receipts
- Submitted URLs and language selections are kept while awaiting review. They and private editor notes expire 90 days after resolution and are removed by maintenance. Receipts and replay fingerprints remain until account erasure. Erasure removes your private suggestions and clears private review notes you authored on retained suggestions. Independently edited canonical events can remain after submitter erasure, without individual submitter attribution.
- Project suggestion evidence and receipts
- Submitted URLs, language selections and optional missing-language hints are kept while awaiting review. They and private editor notes expire 90 days after resolution and are removed by maintenance. Receipts and replay fingerprints remain until account erasure. Erasure removes your private project suggestions and clears private review notes you authored on retained suggestions. Independently edited public projects can remain after submitter erasure, without individual submitter attribution.
- Technical logs
- Hosting and application logs are kept only for the period set by the relevant provider or reasonably needed for security, abuse prevention, and troubleshooting. You can contact the controller for the current provider-specific retention details.
- Privacy correspondence
- Messages concerning privacy rights are kept only as long as needed to answer the request and retain evidence that the request was handled lawfully, then deleted when that purpose and any applicable legal period have ended.
Your data-protection rights
Depending on the circumstances, you may ask for access to or correction of your data, deletion, restriction of processing, or data portability, and you may object to processing based on legitimate interests. You can download an account-data export or delete your account from the Account page. You can also contact the controller using the address above.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland, or with the competent supervisory authority where you live or work. Requests are normally answered within one month.
Is the data required?
An account is optional. The OAuth identity and authentication data described above are necessary if you choose to use account features; without them, Beyond Tabs cannot create or operate an account. You can continue to browse the public site without signing in.
Beyond Tabs does not use your personal data for solely automated decisions that produce legal or similarly significant effects.
Changes to this notice
This notice may be updated when the service or its data handling changes. The effective date at the top of the page identifies the current version. Material changes will be highlighted on the site where appropriate.