Privacy

What we store

When you sign in with Google or GitHub we receive and store your email address, the provider you used and its account identifier, and the name and picture the provider gives us. We never receive your password.

Your page holds what you put on it: the name shown, the line under it, the address you chose, the author records you linked, your publications and the papers citing them, anything you typed into your CV, and a CV file if you upload one. Almost all of this is bibliographic information that was already public before you arrived.

We also keep a record of security relevant actions, such as signing in, renaming your page or deleting your account. Those records hold a one way hash of your network address rather than the address itself, and a shortened description of your browser.

If you subscribe, Stripe holds your payment details. We store only a customer reference and whether the subscription is active. We never see your card.

What other people can see

Your page is public unless you make it private in your settings. A public page shows your name, the line under it, your linked records, your publications and citations, your CV, and the figures beside them. It never shows your email address, your payment details or anything from the security record. When a page is private it returns nothing to anyone but you, including its social image and its entry in the site map.

Who else receives data

To build your page we ask OpenAlex, Crossref and Semantic Scholar about authors and papers. We send them search terms and identifiers, together with a contact address for our service, and never anything about you as a person.

Google and GitHub see that you signed in. Stripe handles payment and holds your card details. Resend delivers the email we send you, so it sees your address. Cloudflare sits in front of the site and stores uploaded files and our backups. The site itself runs on one rented server. Each of these receives only what it needs to do its part.

How long we keep it

Your page and everything on it stays until you delete it. The security record is kept for twelve months, payment events for ninety days, and our own usage counters for thirteen months. Copies of answers from the sources above are kept briefly so we do not ask them the same question twice.

What you can do

You can download everything we hold about you from your settings, as a data file and a bibliography. You can delete your account there too, which cancels any subscription, removes your account and your files, and cannot be undone. Bibliographic facts that belong to the literature rather than to you, such as the fact that one paper cites another, remain, because other pages rely on them.

Every email we send carries a one click unsubscribe. You can make your page private at any time. If you believe something on the site should not be there, use the report link on the page in question.

Cookies

Signing in sets a cookie that keeps you signed in, and a few short lived ones that make the sign in itself safe. That is all of them. There is no advertising, no analytics and no tracking of any kind on this site, so there is nothing to consent to and nothing to turn off.

Changes

We will say on this page when it changes, and the date above will move. If a change matters to you, we will tell you by email before it takes effect.