Privacy

• Usage analytics. Page views and in-page interactions are measured with PostHog and Google Analytics: pages visited, referring site, browser and device class, and approximate (city-level) location derived from IP address. This tells us which instruments researchers actually use. No advertising identifiers, no cross-site tracking, no sale or sharing of this data for marketing.
• Programmatic-access telemetry. Calls to the MCP server and agent fetches of machine-readable surfaces are logged with the tool or path invoked, the client name/version it announces, latency, and status. Identity is anonymous by construction — a one-way hash or the bot family name, never a stored raw IP tied to a profile.
• What you submit. The email subscription form stores the address you enter, used only to send the updates you asked for; write to the contact below to be removed. The data-correction suggestion form stores what you submit for editorial review. Neither is shared.
• Transient operational data. Rate limiting keeps short-lived per-IP request counters (minutes, not months). Standard hosting logs exist at our infrastructure providers as with any website.

There are no accounts, so no passwords, names, or profiles. Your watchlist lives in your own browser's local storage and is not transmitted to us unless you generate its RSS URL. We do not run third-party advertising or embed social-media trackers, and we never sell personal data.

Vercel (hosting and delivery), Supabase (database), PostHog (analytics), Google (analytics), Upstash (rate-limit counters), and Mapbox (map tiles — your browser fetches tiles from Mapbox directly on map pages, so Mapbox sees the request as any tile server would). Each processes data solely to provide its service to us.

Analytics and telemetry are retained only as long as useful for understanding how the platform is used, and are held as aggregates wherever possible. Blocking analytics with standard browser tooling does not degrade the site. For removal of a subscription address, a suggestion you submitted, or any question about this policy: davidgringras@hsph.harvard.edu.

Automated clients are welcome (see Agents & API). Their requests are logged under the same anonymous telemetry described above. The site's data itself — the research substrate — contains information about organizations and facilities, not private individuals.