Privacy and Cookies

What we collect

• Using the website. When a page reads data, we log the operation, how long it took, whether it failed, your IP address and browser, and your account if you are signed in. We do not log what the page asked for or what it received.
• Using the API with a key. We log each request and response in full, with your account, IP address, client details and request headers. We never store your API key, cookies or other credentials from those headers, and API keys themselves are stored only as a one-way hash.
• Creating an account. Your name, email address, institution, position and country, and the version, time and IP address at which you accepted the account terms.
• Accepting the site notice. The notice version, the time, your IP address and browser, and your account if you are signed in.
• Analytics. We use PostHog to count page views and clicks. It sets no cookies, stores nothing in your browser, does not record sessions and is not linked to your account. PostHog receives your IP address with each event.

Cookies and browser storage

• Sign-in cookies keep you signed in. They are set only when you sign in.
• A notice cookie (disclaimer_token) records that this browser has read the site notice. It lasts one year.
• Local storage remembers that you accepted the notice today, so it is not shown again until tomorrow.

We use no advertising or tracking cookies, and our analytics set none.

Why we use it

To run and secure the service (for example rate limiting, preventing abuse and fixing errors), to understand how the database is used, and for research on its use. We publish only anonymized, aggregate analyses. We do not sell your data or use it for advertising.

Who processes it

Vercel hosts the site, Supabase provides the database and sign-in, and PostHog provides analytics. These providers may process data in the United States.

How long we keep it

Account details are kept while your account exists. Request logs and records of accepting the site notice or account terms are kept indefinitely, recent entries in our database and older ones in an offline archive kept by the site's maintainer, so that use of the database can be studied over time and agreements can be shown. Only anonymized, aggregate analyses of them are ever published.

Children

This site is for professional, research and educational use and is not directed at children. Accounts are for adults (18 or older).

Your choices

You can revoke your API keys on your account page. To see or correct your account details, or to delete your account, contact us.