Privacy
What Chempirical stores about you, why, and for how long.
Who runs this site
Chempirical is run by Nitramine. Questions and requests about your data go to support@chempirical.com.
Visits
The site runs on a server of Hetzner Online GmbH in Germany. There are no ads, no third-party analytics and no content delivery network; fonts and scripts come from this site.
For each page view the server records the path, the referring site, your IP address, your browser's user agent, whether the visit looks like a bot, your account if you are signed in, and a visitor key that changes every day. The page also reports which tools you use, what you search for on the site and script errors; your browser sends none of this while Global Privacy Control is on. These records are deleted after 180 days. They keep the site running and secure and show which pages people use (legitimate interest, Art. 6(1)(f) GDPR).
Accounts
An account is optional. It holds your email address, your user name, a hash of your password or the id of your Google or GitHub account, and when you signed in. A sign-up that is not confirmed is deleted after 48 hours, and the record of failed sign-ins after 7 days. Mail for sign-up and password reset goes out through our own mail service. You can delete your account with all its documents on your profile page (contract, Art. 6(1)(b) GDPR).
Cookies and browser storage
Signing in sets the cookie __Host-session for 30 days. Short-lived cookies carry a message to the next page and protect a sign-in with Google or GitHub. Your browser keeps your theme, your language choice and the Covalent settings in local storage, and Covalent documents in IndexedDB. Documents reach the server only when you are signed in, and a share link lets anyone who has it open a copy until you stop sharing.
Compound look-ups
When you ask for a compound the database does not know yet, the server looks up the name or structure at PubChem, run by the US National Library of Medicine. Your IP address is not passed on.
Your rights
You can ask for access to your data, its correction, deletion or restriction, and a copy to take elsewhere, and you can object to its use. You can also complain to a data protection authority.