‡Two cookies, both for sign-in

This site sets exactly two cookies, both for staying signed in, plus one ten-minute cookie during the ORCID sign-in handshake itself. Visitors browsing this site, and readers of every published page, get none.

There are no analytics cookies, no advertising cookies, and no fingerprinting, here or on any published page.

The handshake cookie (op_oauth_state, ten minutes) protects against forged logins. If you arrive via a colleague's referral link, the referral is remembered in your browser's localStorage, not a cookie, and it never leaves your browser unless you sign up.

‡Email

We never send email, and we never collect your address. Sign-up doesn't ask for one. If your ORCID record contains an email address, we never use it for mail; it's rendered on your page only if your record makes it public and you choose to show it.

The newsletter is optional, hosted by Buttondown, and exists only if you subscribe to it. It's the one way to hear when 1.0 lands.

‡Third parties

Zero third-party requests, on this site and on every published page. Fonts are self-hosted. Nothing is loaded from a CDN, an analytics service, or a social network.

The one outside service your browser ever sees is ORCID itself: at sign-in, with your permission, revocable at orcid.org. Our server also syncs your record from ORCID, and when something breaks on our server the error report (the failing request and technical details, never who you are) goes to Sentry so we can fix it. No Sentry code runs in your browser.

‡What we store

• Your ORCID iDIt's your account; there is no password.
• A copy of your public ORCID recordWhat the sync fetches, so your page renders fast.
• Your presentation settingsLayout, palette, overrides, and anything you've hidden or added.
• Images you uploadAt most a profile photo and a header background.
• Your published pageThe rendered HTML we serve at your address.
• A credit historyWhen referral months were earned and used. No payment details, ever.

That's the whole list. We store no payment details (during the beta nothing is for sale, and at 1.0 payment goes through a processor; card numbers never touch us).

‡Deletion

Instant and self-serve, from the editor. Deleting your account unpublishes your page and removes the stored copy of your record and your settings. Your ORCID record is untouched; it was never ours.