Last Updated: February 8, 2026

SMUJO ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information in compliance with global data protection standards, including the GDPR (EU), CCPA/CPRA (USA), and UU PDP (Indonesia).


1. Legal Basis for Processing

We process personal data under the following legal frameworks:

  • Consent: You have given clear consent for us to process your personal data for a specific purpose (e.g., subscribing to a newsletter).

  • Contractual Necessity: Processing is necessary for a contract we have with you (e.g., manuscript submission and peer-review process).

  • Legal Obligation: Processing is necessary for us to comply with the law.

  • Legitimate Interests: Processing is necessary for our legitimate interests, such as website security, fraud prevention, and improving our services.

2. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked to you:

  • Identifiers: Name, email address, institutional affiliation, and ORCID iD (for registered users).

  • Technical Data: IP address, browser type, device information, and operating system.

  • Usage Data: Pages visited, time spent on the site, and interaction patterns.

  • Professional Data: For authors/reviewers, we collect academic credentials and publication history.

3. Cookies and Tracking Technologies

We use cookies to enhance your experience.

  • Essential Cookies: Required for technical site functionality (e.g., staying logged in).

  • Analytics Cookies: We use Google Analytics with IP Anonymization enabled to understand site traffic.

  • Control: You can opt-out of cookies through your browser settings or our cookie consent banner. For California residents, this serves as your "Do Not Sell or Share My Personal Information" notice.

4. Third-Party Service Providers

To provide a secure and efficient service, we share limited data with:

  • Cloudflare: For DDoS protection, security, and content delivery (CDN).

  • Google Analytics: For anonymized traffic analysis.

  • Crossref/Metadata Partners: For academic indexing and DOI registration.

5. International Data Transfers

As a global publisher, your data may be transferred to and processed in countries outside of your own. We ensure these transfers are protected by:

  • Standard Contractual Clauses (SCCs) approved by the European Commission.

  • Compliance with the Data Privacy Framework or equivalent adequacy decisions.

6. Data Retention

We retain personal data only for as long as necessary:

  • Manuscript Data: Permanent (as part of the public academic record).

  • Account Data: Until you request deletion of your account.

  • Security Logs: Typically retained for 30–90 days unless required for investigation.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

  • Right to Know/Access: Request a copy of the data we hold about you.

  • Right to Rectification: Correct inaccurate or incomplete data.

  • Right to Erasure: Request that we delete your personal data (subject to academic record-keeping requirements).

  • Right to Restrict/Object: Object to certain processing activities.

  • Right to Portability: Request a transfer of your data to another service.

  • Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

8. Children’s Privacy

Our services are directed to the academic community and are not intended for children under the age of 16 (or 13 in some jurisdictions). We do not knowingly collect data from children.

9. Security Measures

We implement robust technical and organizational measures, including SSL/TLS encryption, firewalls provided by Cloudflare, and restricted access protocols to prevent unauthorized access or data breaches.

10. Contact Information

If you have questions about this policy or wish to exercise your rights, please contact our Data Protection Liaison:

SMUJO Editorial Office Email: [email protected] Website: https://smujo.id