Privacy & cookies

Updated 23 October 2026 · Notice version 2026-10-23

You can use this website with optional statistics switched off. We do not use advertising trackers, sell visitor information, or build individual browsing profiles.

Optional statistics stay off until you allow them. With JavaScript disabled, no optional statistics are sent.

Who is responsible?

Antonio Fernández-Guerra is the data controller for this independently operated website, outside University of Copenhagen infrastructure. University affiliations describe the research group; the university is not the controller of this website.

For privacy questions or requests: [email protected].

What we process and why

Site delivery and security: hosting connection information, account details, protected credentials, sessions and short-lived abuse counters operate and protect the service. Our basis is legitimate interests in running a secure website.
Research content: professional names, affiliations, biographies, profile photos, photographer credits, authorship and research material communicate the group's work. Drafts and revisions stay private until publication. Uploaded photo drafts are visible only to their author and authorised site editors until the Owner approves publication. Original photo files and embedded metadata are not retained. Our basis is legitimate interests in research communication and accurate content. You can request correction or object to publication.
Selected profile publications: members choose which publications to include. When a member requests a DOI lookup, the entered DOI is sent to Crossref to retrieve bibliographic details; account details and biography text are not sent. Imported details can be corrected and stay in a private draft until the Owner approves publication. Work without a DOI can be entered manually.
Optional statistics: only with consent, we count page views, approximate daily browsers and separate country/device/browser/operating-system/source/hour totals. These statistics retain no visitor IDs, IP addresses, full user-agent strings, referring URLs or individual event histories.
Requested chat: ordinary questions/replies stay in this page's memory and clear on reload; they are not saved as conversations in our database. New AI answers may send the current question and public passages to Anthropic. Our basis is legitimate interests in providing the research service you request. Please leave out personal or confidential information.
Optional question sharing: explicit consent saves the shared question privately for review for up to 30 days. It may be used to prepare a reviewed answer for reuse. Keep its deletion code to withdraw the question and stop reuse of an answer derived from it.

Cookies and browser storage

Necessary sign-in and requested-chat functions do not depend on statistics consent. Their cookies are first-party, HttpOnly, SameSite=Strict and Secure on HTTPS. We use no analytics or advertising cookies.

Item	Purpose and lifetime
Sign-in challenge	Completes password/authenticator sign-in; up to five minutes.
Account session	Keeps an authorised account signed in; up to eight hours, with an earlier inactivity timeout. Sign-out clears it.
Requested-chat session	Chat usage/abuse limits; up to 24 hours, renewed when used.
`ecogenomics_privacy_choice`	Browser storage remembers your choice, its time and notice version for up to six months. It has no visitor ID and only manages this preference.
`ecogenomics_visit_day`	Only after consent, a UTC date estimates daily browsers. It is overwritten on the next consenting visit and removed when statistics are switched off.

Do Not Track or Global Privacy Control keeps statistics off even after an earlier Allow choice. Withdrawal stops future optional collection and removes the analytics date marker. Existing aggregates cannot be linked back to you or selectively removed. Choices apply separately to each browser and website origin. If browser storage is blocked, the choice lasts only for this page.

Retention and providers

Active statistics retain 90 UTC days; older rows are removed on the next read/update. Signed-in Miko usage retains daily question counts, AI attempts, measured token costs and unconfirmed cost reservations linked to each account for 90 UTC days, visible only to the website owner. Earlier usage is not reconstructed. Question text and conversations are not stored by this accounting. Older usage totals are removed on the next request. Accounts and editorial content/history, including prepared profile photos and credits, remain while needed to operate the site. A bio can retain up to 20 uploaded photos; earlier photos remain private when replaced and can be needed for revision history. Restricted recovery copies can outlast active records and are used for recovery, not analytics. Contact us about deletion and any applicable retention exceptions.

IONOS provides hosting, database and email. Hosting/security logs are separate from optional statistics. Its published web-hosting documentation describes connection/access records, anonymised visitor addresses and retention up to eight weeks; the applicable hosting arrangement determines the logs available. IONOS data-processing information.

When enabled and requested, Anthropic processes AI API requests under its commercial terms. Its published policy normally deletes API inputs/outputs within 30 days, with safety, legal and agreement-specific exceptions. This is separate from our no-recording policy. Processing may involve countries outside the EEA; contact the controller for applicable provider arrangements and transfer safeguards. Anthropic retention information.

Fonts, country ranges and map geometry are served locally. Visitor addresses are not sent to a geolocation/map service. External websites load when you follow their links.

Your choices and rights

Turn statistics off above without losing site access, or withdraw a shared question with its deletion code. For personal information we hold, you may request access, correction, erasure, restriction or portability where applicable, and object to legitimate-interest processing. Withdrawal does not affect the lawfulness of earlier processing. Email the controller; we may need enough information to verify and locate your request.

You can complain to Datatilsynet. This service does not make automated decisions about you with legal or similarly significant effects.