How SEEDBiomed handles browser storage and personal data
SEEDBiomed (the "we", "us") is an academic computational-biomedicine team. This website (seedbiomed.com) is operated by the SEEDBiomed team. For privacy questions, contact [email protected].
This site does not use third-party advertising, analytics, or tracking cookies. We use only strictly necessary browser storage required for the site to function. Under the EU ePrivacy Directive (Article 5(3)) and the GDPR, strictly necessary storage does not require prior consent — but we list it here for full transparency.
| Key | Type | Purpose | Lifetime |
|---|---|---|---|
cookieNoticeAcked | localStorage | Remembers that you have dismissed the cookie/privacy notice so it is not shown again. | Until you clear browser storage. |
seedLang | localStorage | Remembers your selected interface language. | Until you clear browser storage. |
sessionToken | localStorage | Authenticates members on the admin/profile area after login. Set only if you log in. | Until logout or until you clear browser storage. |
adminSecret | sessionStorage | Holds an admin authentication secret for the current tab. Set only on the admin subscriber dashboard. | Until the tab is closed. |
microMapLiked | localStorage | Remembers that you have "liked" a Journal Club article so the like is not double-counted. | Until you clear browser storage. |
You can clear any of the above at any time through your browser's "Clear site data" / "Clear cookies and site data" controls.
If you subscribe to our newsletter, we store your email address in a database (Cloudflare KV / Redis). The legal basis is your consent (GDPR Art. 6(1)(a)). You can unsubscribe at any time using the link at the bottom of every newsletter email, or by emailing us. Unsubscribing removes your email from our list.
If you send us a message via the contact form, we receive your name, email address, and the content of your message by email (sent via SMTP). The legal basis is our legitimate interest (GDPR Art. 6(1)(f)) in answering your inquiry, or, where you propose a collaboration, our pre-contractual interest (GDPR Art. 6(1)(b)). Messages are retained in our team mailbox for as long as needed to handle the inquiry.
Team members have accounts (username, role, optional profile / publication file references) stored on the server to enable profile and publication management. The legal basis is the contractual / membership relationship with the team.
Our hosting provider (Cloudflare Pages / Workers) may retain standard request logs (IP address, user-agent, request path, timestamp) for security and abuse prevention. The legal basis is our legitimate interest (GDPR Art. 6(1)(f)) in operating the site securely. We do not use these logs for analytics or profiling.
The site offers an optional AI assistant (a chat widget). It loads and connects to our service only when you actively open it, and it sets no cookies and stores nothing in your browser beyond the current session. When you send a message, the text of your question is processed by our serverless function (Cloudflare Workers) to generate an answer using AI language models (see "Third parties" below). Your IP address is used transiently to enforce simple usage limits that prevent abuse; it is never stored in raw form — only as a daily, irreversible pseudonymised (hashed) value that is automatically deleted within 48 hours. We do not store your conversations on our servers — chat history exists only in your browser for the duration of the session. The legal basis is our legitimate interest (GDPR Art. 6(1)(f)) in providing helpful information about the site and preventing abuse. Your messages are sent to the AI provider (OpenRouter) listed below solely to generate a response, under a zero-data-retention agreement — they are not stored by the provider and not used to train AI models. As a general precaution, we still recommend not entering sensitive personal data into any chat assistant.
translations.json) and the static repository are served via GitHub. Loading translations sends a request to raw.githubusercontent.com.We do not sell or share personal data with third parties for advertising or marketing purposes.
If you are in the EU/EEA, you have the right to:
To exercise any of these rights, email [email protected].
We keep personal data only as long as needed for the purpose stated above, or as required by law. Newsletter emails are kept until you unsubscribe; contact-form messages are kept while needed to handle the conversation. AI-assistant usage counters (pseudonymised, hashed) are deleted automatically within 48 hours, and assistant conversations are not stored on our servers at all.
We may update this policy as the site evolves. The "Last updated" date at the top of this page indicates the most recent revision.