Privacy notice

Updated September 28, 2026

What you share

We use your email address to sign you in through Supabase and send sign-in emails through Resend. Your public username and optional bio appear with your published research. Your email address is not part of your public profile.

Your research

Importing a file extracts its text in your browser. Saving sends the report fields and the original extracted text to our database. File bytes are not retained. The original text snapshot is kept with the saved report so you can review it; it is not shown on the public report page.

Drafts require the author’s account to access. Publishing makes the report, question, introduction, byline, sources, and any process details you choose to include publicly available. Other people and search engines may copy or index published content. Unpublishing cannot recall copies made elsewhere.

Storage and service providers

The site runs on OpenAI Sites with Cloudflare infrastructure and a Cloudflare D1 database. Supabase handles authentication and Resend delivers authentication emails. These providers process data needed to operate their services under their own policies.

Your browser stores your authentication session. An unsaved report may be held in this tab’s session storage while you sign in. Saved reports remain in the database until deleted. Abuse reports and rate-limit records support moderation and security; the application uses a daily IP-derived hash for report-flag limits.

Your controls

You can edit your public profile and edit, unpublish, or delete your reports from My research. Delete removes the report and its original text from the application database; provider backups and operational logs may have separate retention periods. Use the flag control on a published report to raise a content or privacy concern with the site moderator.