Privacy policy

Version 1.0 — last updated 2026-10-16

Journal of Peer-Reviewed Scientific Research respects the privacy of its visitors, members, authors, and reviewers. This policy sets out what personal data we collect, why we collect it, who sees it, how long we keep it, and your rights over it. It is written to align with the Personal Data Protection Law of the Kingdom of Saudi Arabia.

1 — Data controller

The data controller is Journal of Peer-Reviewed Scientific Research, reachable through the contact page.

2 — What we collect

Account data — provided by you at registration: name in Arabic and English, email address, affiliation, country, specialty, ORCID identifier, mobile number if given, and a password stored as an irreversible hash.

Manuscript data — the title, abstract, keywords, and files you submit, the names, affiliations, and email addresses of co-authors, and your letter to the editor.

Review data — reviewer reports, recommendations, and correspondence within the system.

Technical data — your IP address at registration and when you accept the legal documents, sign-in times, and view and download counters in aggregate form not attributed to any individual.

We do not collect or request sensitive personal data, and you should not include any in your correspondence.

3 — Why we collect it

• To manage your account and authenticate you.
• To receive, review, and publish your manuscript — performance of the agreement between you and the journal.
• To correspond with you about your manuscript and your account.
• To deposit the metadata of published articles with indexing services.
• To record your acceptance of the legal documents as evidence of consent.
• To protect the system from abuse and intrusion.

4 — What becomes public

On publication the following become public: author names, affiliations, ORCID identifiers, the title, abstract, keywords, and the article file. This is inherent to scholarly publishing and cannot be undone after publication.

Your email address, mobile number, and IP address are never published.

5 — Who sees it

Within the journal — the editorial board, on a need-to-know basis. Reviewers see the manuscript stripped of author identity, and reviewer identities are not disclosed to authors.

Service providers who help us run the system process your data only on our instructions and only for the purpose for which it was given to them:

• Brevo — email delivery; receives your name, email address, and the message text.
• Crossref — deposit of metadata and author names for published articles.
• ORCID and Google — only where you choose to sign in with them, for identity verification.
• Our hosting provider — storage of the database and files.

We do not sell or rent your data, do not share it for marketing purposes, and disclose it to no one else except under a binding legal obligation.

6 — Transfers outside the Kingdom

Some of the service providers listed above operate servers outside the Kingdom, so using them involves transferring some of your data abroad. We limit such transfers to what running the service requires.

7 — Retention

• Published articles and their metadata — kept permanently; the scholarly record is not erased.
• Manuscripts rejected or withdrawn before publication — kept for five years to document the editorial process, then destroyed.
• Account data — kept for as long as your account exists.
• Records of acceptance of legal documents — kept for as long as the manuscript or account exists, as evidence of consent.
• Technical sign-in logs — kept for twelve months.

8 — Your rights

In respect of your personal data you may:

• be informed of what we collect and how we process it;
• access it and request a copy;
• request correction of inaccuracies — most of it you can edit yourself from your account page;
• request its destruction, unless a law requires us to keep it or it forms part of a published article;
• withdraw consent to any processing that was not necessary to perform the agreement.

Requests are made through the contact page and answered within thirty days.

9 — Cookies

We use functional cookies only — none for tracking or advertising:

• Session cookie — keeps you signed in; expires when you close the browser or sign out.
• Theme cookie — remembers your choice of light or dark appearance.

We use no third-party analytics and set no advertising trackers. That is why the site shows no cookie consent banner: there is nothing to consent to.

10 — Security

The whole site runs over an encrypted connection (HTTPS), passwords are stored as irreversible hashes, two-factor authentication is available to every member, and access is restricted by role. No transmission over a network can be guaranteed absolutely secure.

11 — Children

The site is intended for researchers and academics. Our services are not directed at anyone under eighteen, and we do not knowingly collect their data.

12 — Changes to this policy

We may amend this policy; the version number and date appear at the top of this page. Where a change is material, we notify members in their accounts.