Privacy Policy

How GEDminer handles your data - written in plain English, not legalese.

Your file stays on your device

When you upload a GEDCOM file, it is parsed entirely inside your web browser using a background thread. Your original .ged file is never transmitted to any server. No copy of the raw file is made, stored, or logged anywhere outside your device.

Once the tab or browser is closed (and you are not signed in), every trace of your data is removed from memory.

What happens when you create an account

If you register, the parsed analysis results - structured names, dates, places, and family relationships extracted from your file - are stored in a managed cloud database (encrypted in transit and at rest) so you can return to your work on any device.

Your original GEDCOM file is still never stored or uploaded. Only the derived analysis data is persisted.

Data is stored compressed in an isolated, per-user storage space protected by row-level security policies - only your account can access it through the app, and we do not view or use your data in the course of normal operations. Like any hosted service, infrastructure-level access technically exists, and would only ever be used where strictly necessary for security, debugging at your request, or to comply with legal obligations.

Deleting your data (Right to Erasure)

You can permanently delete your account and all associated data at any time from the My Account page. This immediately removes:

• All saved family tree analysis data • Your cloud storage files • Your user profile and preferences • Your authentication record

This action is irreversible and takes effect immediately. No data is retained after deletion.

Data portability

Your original GEDCOM file remains on your device - you always have full ownership of your source data. The analysis results stored in the cloud are derived from your file and can be regenerated at any time by re-uploading the same GEDCOM.

We do not lock you in. If you delete your account, you lose nothing - just re-upload your file to any tool of your choice.

Cookies & analytics

We do not use any client-side analytics scripts or tracking cookies. No third-party tracking scripts, advertising pixels, or social media beacons are loaded in your browser.

Aggregate usage statistics (visitor counts, page views, approximate country, device type, and referrer source) are collected anonymously at the server level by our hosting provider for operational monitoring. No personal data or genealogical information is included in these statistics.

No cookies are set for tracking purposes. The only local storage used is for your app preferences (such as theme choice) and any saved tree data if you choose to create an account.

You can block analytics entirely by using an ad blocker or disabling JavaScript - GEDminer will continue to function normally.

Security measures

Encryption in transit - All connections use HTTPS/TLS encryption • Encryption at rest - Database storage is encrypted at rest (AES-256) • Row-level security - Database access policies ensure users can only access their own data • Password safety - Passwords are securely hashed using industry-standard algorithms - we never see or store plaintext passwords • Isolated operations - Server-side operations (like account deletion) run in isolated, stateless functions with minimal permissions • Open standards - Authentication uses industry-standard JWT tokens

Email & communications

We only send emails you explicitly opt into. During registration, you can choose whether to receive occasional product updates. You can change this preference at any time from your My Account page.

We will never share your email address with third parties or use it for marketing without your explicit consent.

Data controller

GEDminer is the data controller for any personal data processed through this service.

For data subject requests, questions about how your personal data is handled, or to exercise your GDPR rights (access, erasure, portability, restriction, or objection), contact:

Email: [email protected]

We will respond to all requests within 30 days as required by law.