Privacy Policy

CVRPLib is a research platform for the Capacitated Vehicle Routing Problem (CVRP) and hosts benchmark instances, challenge submissions, and related material. This Privacy Policy explains how we handle personal data in line with GDPR (EU), LGPD (Brazil), PIPEDA (Canada), and applicable US privacy principles.

When you create an account or register for the challenge, we collect:

• Full name
• Email address
• Affiliation (institution or organization)
• Password (stored securely using hashing)

When participating in the challenge, we also collect:

• A document with the solution methodology description
• Solution files, timestamps and metadata you submit
• Any information you voluntarily include in submission forms

During general site use:

• Symfony CSRF tokens stored in cookies (essential for security)
• Optional analytics data (Google Analytics), only if consent is provided when the cookie banner is enabled

We do not collect server logs such as IP addresses, browser information, or other timestamps.

• Manage user accounts
• Run the CVRPLib challenge and handle solution submissions
• Publish rankings, aggregated performance results, and related research material
• Maintain the security and functionality of the platform
• Produce usage statistics through Google Analytics, but only with consent

We do not sell personal data. For academic transparency, challenge results and solution performance may be published in aggregated or individual form. Names and affiliations may be displayed in ranking lists or reports as part of the challenge rules.

Account data and submission files are retained for the duration of the challenge and for later verification, replication, or academic reference. You may request deletion of your personal data, except where retention is required to preserve the integrity of published research or rankings.

• Essential cookies: Symfony stores CSRF tokens in cookies purely for security. These cookies do not track users and cannot be disabled.
• Analytics cookies: Google Analytics may be used to understand how the site is accessed. These cookies will only run after explicit consent via the cookie banner.

• Performance of a contract: account creation, participation in the challenge
• Legitimate interest: security and core site functionality
• Consent: Google Analytics

You may request:

• Access to your data
• Correction or deletion of your data
• Information about processing
• Withdrawal of consent for analytics cookies

DPO / Administrator: Prof. Rafael Martinelli – galgos@inf.puc-rio.br

This Privacy Policy may be updated periodically. The current version will always be available on the site.