DATASEEK / privacy

As little personal data as possible.

No public account, advertising tracker, external analytics or external map tiles are required.

Search without a profile

Queries and filters are in the URL and may appear in browser history and technical server logs. DataSeek does not maintain search profiles. Fonts and map geometry are served locally. Following a source link opens an external publisher website under its own privacy rules.

Suggestions and reports

Suggestions and reports are stored for review. Email is optional, used only for follow-up and never published. Avoid sensitive personal information in your message. Contact fields are cleared after 90 days; closed submissions are removed after 180 days. Backups may retain deleted records for their retention period.

Administration and security

Only administrators receive a necessary HttpOnly session cookie with SameSite Strict and Secure under HTTPS. Sessions expire after twelve hours. Rate limiting stores a keyed hash of an address rather than a readable IP. Administrative changes are audited. The existing hosting and reverse proxy may keep technical access logs.

Responsible operator

The legal operator, responsible administrator and public privacy contact are not yet established. This is an outstanding handover item, not a compliance claim. For now, submit a source suggestion titled “Privacy request” with optional contact details. Follow-up requires the administrator still to be configured.