Privacy Policy

Your file stays on your device

When you upload a GEDCOM file, it is parsed entirely inside your web browser using a background thread. Your original .ged file is never transmitted to any server. No copy of the raw file is made, stored, or logged anywhere outside your device.

Once the tab or browser is closed (and you are not signed in), every trace of your data is removed from memory.

What happens when you create an account

If you register, the parsed analysis results - structured names, dates, places, and family relationships extracted from your file - are stored in a secure, encrypted cloud database so you can return to your work on any device.

Your original GEDCOM file is still never stored or uploaded. Only the derived analysis data is persisted.

Data is stored in an isolated, per-user storage space protected by row-level security policies, meaning no other user can access your data - not even us, except through your authenticated session.

Deleting your data (Right to Erasure)

You can permanently delete your account and all associated data at any time from the My Account page. This immediately removes:

• All saved family tree analysis data • Your cloud storage files • Your user profile and preferences • Your authentication record

This action is irreversible and takes effect immediately. No data is retained after deletion.

Data portability

Your original GEDCOM file remains on your device - you always have full ownership of your source data. The analysis results stored in the cloud are derived from your file and can be regenerated at any time by re-uploading the same GEDCOM.

We do not lock you in. If you delete your account, you lose nothing - just re-upload your file to any tool of your choice.

Cookies & analytics

GEDminer uses Google Analytics to understand aggregate usage patterns - such as which features are most popular and how long analysis takes. This helps us improve the tool.

We do not send any personal genealogical data to Google Analytics. File names are anonymised before any analytics event is recorded, so family surnames in file names are never transmitted.

Analytics may set cookies for session tracking. You can block these using your browser's built-in cookie controls or an ad blocker - GEDminer will continue to function normally without them.

No other third-party trackers, advertising scripts, or social media pixels are used.

Security measures

• Encryption in transit - All connections use HTTPS/TLS encryption • Encryption at rest - Database storage is encrypted at rest (AES-256) • Row-level security - Database access policies ensure users can only access their own data • Password safety - Passwords are securely hashed using industry-standard algorithms - we never see or store plaintext passwords • Isolated operations - Server-side operations (like account deletion) run in isolated, stateless functions with minimal permissions • Open standards - Authentication uses industry-standard JWT tokens

Email & communications

We only send emails you explicitly opt into. During registration, you can choose whether to receive occasional product updates. You can change this preference at any time from your My Account page.

We will never share your email address with third parties or use it for marketing without your explicit consent.