Privacy
Reading the site
Reading needs no account. The site sets no cookies, runs no analytics and loads nothing from advertising or tracking companies. The web host that serves these pages, Netlify, receives each visitor's IP address and browser details in its ordinary request logs. The Contributors, Track record and Log in pages also ask Supabase (below) for public data from your browser, without an account.
If you make an account
- What we hold: your email address; a password if you set one (stored only as a scrambled value by the login service); your display name; any links you add; whether you ticked "18 or older"; your submissions, identification requests, the opinions given on them and your credits.
- Files: the photos and lab reports you upload. Before upload your browser shrinks photos and removes the location (GPS) and camera data stored inside them; a PDF report is sent unchanged. Black out your name, address and email on a report before sending it.
- On your device: your browser keeps a login token and the time you last used the site, so you stay signed in. If 30 days pass without use, this device signs you out the next time you open the site. Nothing else is stored.
Who holds it
Accounts, records and files are stored with Supabase, a hosting company, on servers in the United States. Login emails are sent through that service. The pages themselves are served by Netlify. Mail to the contact address is forwarded by our domain registrar to an email provider.
If you log in with Google or Facebook, that company tells us your email address and usually your name and profile picture; we do not show or use the name or picture. That company also learns that you signed in to WhatMorph, and its sign-in pages may set its own cookies.
What other people can see
- Everyone: your display name, the links you chose to add, your contributor rank and counts, and for an approved submission the photos, the genes named, the lab name and the report date.
- You and the reviewers only: your lab reports, your identification requests and their photos, the opinions on them, and your credits.
- Nobody else: your email address is not published or sold. It is shared only with the services that run the site.
How long it is kept, and how to remove it
- A submission and its files are kept until you withdraw it on your account page. Withdrawing deletes the report and photos from storage; the page tells you only what the storage service confirmed was deleted. Published photos leave the site within 7 days, when it is next rebuilt.
- Identification requests, their photos and the opinions on them are kept until you delete your account. There is no separate delete button for a request yet; write to the contact address below to have one removed sooner.
- "Delete my account" on your account page deletes your files first and removes the account only when the storage service confirms none are left.
- Copies outside our storage: approved photos are also kept in the site's build files and in earlier versions held by the web host. These are removed within 7 days of a withdrawal or deletion.
- If you cannot log in, write to hello@whatmorph.com from the email address on the account.
Age
Accounts are for people 18 or older. An account found to belong to someone younger is closed and its contents deleted.
Who runs this site
WhatMorph is operated by Approved Property Services LLC, trading as Amnesia Oddities, 52B Main Street, Queensbury, NY 12804.