Privacy

Last updated 27 September 2026. This page describes what the Human Atlas code actually does.

The short version

No account, no cookies, no trackers, no analytics, no ads.
What you type into the body-signal search is not saved.
If you share a learning, we keep the text (with names, emails, phone and ID numbers removed), its language, and the age and country you chose to give.
To stop spam, your network address is kept as a one-way hash for up to 24 hours, never as-is.

Searching body signals

Your search is used to find matching signals and is then thrown away. It is not written to the database. The app keeps no request log, so it has no record of who searched for what.

Symptoms can be sensitive health information. That is why we chose not to store them.

Sharing a learning

When you submit the form, we store:

Your text, after automatic removal of names introduced with "my name is" (and the same phrase in other languages), email addresses, phone numbers, bank and card numbers, ID numbers and @handles. The page shows you what was removed.
The language you picked.
Your age and country, only if you filled them in. Both are optional.
The date and time it arrived, its review status (pending, published or rejected), and the themes it was sorted into.

We do not store your name, email address, account or network address with your learning. Please leave out anything that could identify you or someone else: the automatic removal cannot catch everything.

You must be 16 or older to share.

Moderation and publishing

A person reads every submission. Nothing is public until a moderator approves it. Rejected submissions stay hidden and are marked as rejected. A moderator can delete any submission.

Approved learnings are published anonymously under CC BY-SA 4.0. That licence lets anyone copy and reuse them, with credit, so once a learning is public, copies may exist outside this site.

Spam protection

Each submission records a one-way hash of your network address, made with a secret key, plus the time. It is used only to limit submissions to 5 per hour and 20 per day. The address itself is never stored.
These records are deleted once they are older than 24 hours. The cleanup runs on every submission and every time the server starts.
The form also carries a signed timestamp, so the server can tell a person from a bot that submits instantly. It contains no information about you.

Cookies and other websites

This site sets no cookies and uses no local storage for visitors. The pages load nothing from other servers. The only exception is the developer API pages (/docs and /redoc): they load their viewer from cdn.jsdelivr.net, plus an icon from fastapi.tiangolo.com and, on /redoc, fonts from Google Fonts. The main site does not.

Where the data lives

The site runs on fly.io in Amsterdam, in the EU. fly.io carries the network traffic to and from the site. The database sits on a disk there, with daily snapshots kept for 5 days.

Removing a learning

Learnings are anonymous, so we cannot tell which one is yours. Once a contact address is published below, you can send us the exact text of a learning and we will delete it.

Contact: not published yet. A contact address for privacy requests will be added here.

Human Atlas is an educational research index, not medical advice.