Privacy Policy
Last updated: October 7, 2026
1. Overview & Commitment to Privacy
DolphinGemma.com is an independent educational and research knowledge platform. We believe in data minimization. We do not sell personal data, do not deploy third-party tracking advertising networks, and do not require accounts for public visitors.
2. Information We Collect
A. Public Visitors
Public visitors can browse all articles, models, species, and research directories without creating an account or providing personal details.
B. Server Logs and Technical Data
When you access the website, hosting infrastructure (Vercel) automatically processes standard technical connection data (including IP address, browser user-agent, operating system, requested URL, and timestamp). This information is processed strictly for transmitting web content, diagnosing infrastructure outages, and preventing denial-of-service abuse.
C. Editor and Administrator Accounts
For authorized editorial staff and site administrators, authentication credentials (email address, encrypted password hash, and user profile role) are securely managed via Supabase Auth. Public visitors cannot register for administrative accounts.
3. Cookies and Storage
Public Browsing: The public site does not set third-party marketing, advertising, or profiling cookies.
Authentication Sessions: Authorized editors and administrators who log in receive session tokens stored in secure, HTTP-only cookies required for session maintenance.
Note on Analytics: DolphinGemma utilizes Google Analytics 4 (GA4) with IP anonymization to assess aggregated platform traffic, research article engagement, and technical performance without profiling individual users, displaying advertising, or selling personal data.
4. Infrastructure Service Providers
We rely on reputable technical service providers to operate the platform:
- Vercel Inc.: Application hosting, edge delivery, and content distribution.
- Supabase Inc.: Cloud PostgreSQL database, user authentication for staff, and optional object storage.
5. Data Security & Retention
We implement industry-standard safeguards, including HTTPS transport encryption, PostgreSQL Row Level Security (RLS) enforcement, and strict separation of privileged service-role keys from client code. Server logs are automatically rotated and retained only as long as necessary for technical reliability.
6. Contact & Legal Inquiries
For questions regarding this privacy policy, data requests, or rights inquiries, contact our editorial desk directly at contact@dolphingemma.com or via our contact form.
[Placeholder: Final jurisdiction-specific legal disclosures, Data Protection Officer details, and EU/UK GDPR representative appointments to be finalized upon formal legal review.]