Privacy Policy

This Privacy Policy describes how Annotrieve ("we", "our", or "us") collects, uses, and protects information when you use our service. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Annotrieve is a research platform for accessing eukaryotic genome annotations. We collect minimal server-side logs solely for the purpose of understanding usage patterns by geographic location (country level).

When you access Annotrieve, our web server automatically logs the following information for each request:

• IP Address – Your Internet Protocol address, which we use to determine your approximate geographic location (country level only). We extract the real client IP from the X-Forwarded-For header when available.
• Request URI – The specific page or API endpoint you accessed (e.g.,/annotrieve/api/v0/annotations).
• HTTP Method – The type of request (GET, POST, etc.).
• Timestamp – The date and time of your request in ISO 8601 format.
• User Agent – Information about your browser or client application (e.g., browser type and version).
• HTTP Referer – The webpage that referred you to our service (if applicable).
• HTTP Status Code – The response status (e.g., 200, 404, 500).
• Request Processing Time – How long it took to process your request (in seconds).

The logged data is used exclusively for the following purposes:

• Usage Tracking by Country – We process IP addresses to determine the country of origin for requests. This helps us understand the geographic distribution of our users and the global reach of the Annotrieve platform.
• Service Optimization – Analyzing request patterns, response times, and error rates to improve service performance and reliability.
• Research Analytics – Understanding how the platform is used for research purposes, including which API endpoints are most accessed and usage trends over time.

As a data subject under GDPR, you have the following rights:

• Right of Access – You can request information about what personal data we hold about you.
• Right to Rectification – You can request correction of inaccurate data.
• Right to Erasure – You can request deletion of your data (subject to legal obligations).
• Right to Restrict Processing – You can request that we limit how we use your data.
• Right to Data Portability – You can request a copy of your data in a structured format.
• Right to Object – You can object to processing based on legitimate interests.
• Right to Withdraw Consent – If processing is based on consent, you can withdraw it at any time.

Note: Since we only collect IP addresses and request metadata, and we do not maintain user accounts or personal identifiers, it may be difficult to identify specific requests associated with you. However, if you can provide your IP address and approximate timestamps, we will do our best to assist with your request.

If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your data, please contact us:

We will respond to your inquiry within 30 days as required by GDPR.

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority (supervisory authority).