Privacy notice
Version 1.0. What we hold about you, why, and what you can do about it.
Who is responsible
Korsyl is the controller for the personal data described here. You can reach us at privacy@korsyl.com.
The short version
- We do not keep your search history. There is no table of what you searched for. The only searches recorded are those matching a safeguarding alert word on a child's account.
- We do not advertise, profile or track you. No advertising, no analytics, no third-party trackers, no data sold or shared.
- Children are never profiled. A child's age band decides which index they see, and nothing else.
- Nothing leaves the EU/EEA.
What we process, and why
Child account created by a parent children's data
Operating an account for a child and placing them in the correct age band.
| Lawful basis | Consent Parental consent under Art 8. Sweden sets the digital-consent age at 13; below that the parent consents on the child's behalf. Consent is recorded in the consents table. |
| Data | Date of birth, issued korsyl.com address, hashed password, username, band, link to the parent account. |
| Who else sees it | The parent who holds the account. |
| Kept for | Until the account is deleted. The link to the parent is removed automatically at 18. |
Safeguarding keyword alerts children's data
Telling a parent when a child searches a term on the alert list, and showing crisis helplines to the child.
| Lawful basis | Legitimate interests Protecting the child. Deliberately narrow: only matches are stored, never a search history, and sex-education terms are excluded from the default list so ordinary questions stay private. |
| Data | Matched keyword, the search text, timestamp, child and parent account ids. |
| Who else sees it | The parent who holds the account. Nobody else. |
| Kept for | Deleted automatically after the retention period set in admin (default 12 months). |
Adult account
Operating a search account: signing in, and applying the age band that decides which index is returned.
| Lawful basis | Performance of a contract Necessary to provide the service the person asked for. |
| Data | Email address, hashed password, username, public id, account timestamps. |
| Who else sees it | None. No analytics or advertising processors. |
| Kept for | Until the account is deleted, then removed immediately. |
Search index and crawling
Building the index of third-party websites that search results are drawn from.
| Lawful basis | Legitimate interests Operating a search engine. The data is about websites, not people, though a crawled page may incidentally contain personal data published by others. |
| Data | URLs, page titles, descriptions, extracted page text, crawl timestamps. |
| Who else sees it | Nobody. |
| Kept for | Until removed from the index or the domain is blacklisted. |
Moderation and appeals
Recording who approved, rejected or blocked what, so decisions can be explained and contested (DSA Art 17 and 20).
| Lawful basis | Legal obligation Digital Services Act statement-of-reasons and internal complaint-handling duties. |
| Data | Staff account ids, decisions, written reasons, site owner contact details on appeals and applications. |
| Who else sees it | Nobody outside Korsyl. |
| Kept for | Audit entries kept for the period set in admin (default 24 months). |
Security logging
Rate limiting sign-in attempts to make password guessing impractical.
| Lawful basis | Legitimate interests Security of the service, Art 32. |
| Data | IP address, timestamp. |
| Who else sees it | Nobody. |
| Kept for | Deleted after 24 hours. |
How long we keep things
These are the periods our automatic deletion job actually enforces, every day:
| Data | Deleted after |
|---|---|
| Safeguarding alerts on a child account | 365 days |
| Records of moderation decisions | 730 days |
| Sign-in attempt records (IP address) | 1 day(s) |
| Your account and everything attached to it | Immediately, when you delete it |
Children
A child's account is created by a parent or guardian, who provides the date of birth and gives consent on the child's behalf. In Sweden a child can consent to online services themselves from the age of 13; below that age the parent's consent is what makes the processing lawful. We record that consent so we can show it was given.
A child's date of birth decides which slice of the index they see. That is the only thing it is used for. We do not build profiles of children, we do not advertise to them, and we do not sell or share anything about them.
Parents are told when a child's search matches a safeguarding alert word. They are not given a list of everything their child searched for, because we do not keep one. Words about sex education, puberty, periods, contraception and sexual identity are deliberately excluded from the default alert list, so that ordinary questions a teenager is entitled to ask stay private.
Your rights
You can exercise most of these yourself, immediately, from your privacy page:
| Right | How |
|---|---|
| Access a copy of your data (Art 15) | Download it, instantly |
| Portability (Art 20) | The same download, as JSON |
| Rectification - correct it (Art 16) | In your account settings |
| Erasure (Art 17) | Delete your account, instantly |
| Restriction (Art 18) | Ask us to keep your data but stop using it |
| Objection (Art 21) | Email us |
| Withdraw consent (Art 7(3)) | Delete the account. Withdrawing does not undo what was lawful beforehand. |
If you contact us instead, we answer within one month. We may extend that by two months for complicated requests, and we will tell you inside the first month if we do.
If you are unhappy
Please tell us first at privacy@korsyl.com. You also have the right to complain to the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY) - Box 8114, 104 20 Stockholm, imy@imy.se, imy.se. If you live in another EU or EEA country you may complain to your own authority instead.
Cookies
We set one cookie, to keep you signed in. It is strictly necessary for the service, so there is no consent banner - there is nothing to consent to. We use no analytics, advertising or third-party cookies. See our cookie statement.
Automated decisions
Our crawler makes an automatic guess about what a page contains, and that guess can remove a page from results. It can never publish one - a person decides what appears in any age group. No automated decision is made about you, and there is no profiling.
Changes
This notice is version 1.0. If we change it in a way that affects you, we will tell you.