Privacy policy
Bibliominer is research software. It keeps what it needs to clean and analyse your corpus, for a limited time, and nothing else: no advertising, no profiling, no analytics.
Last updated: 29 September 2026
What is stored
Without an account: a random identifier, held by your browser tab in the cleaning application, kept in a cookie in the analysis application, so that your work stays in your own workspace; the Scopus export you import and the decisions you take while cleaning it. Your API keys are not stored: they stay in your browser page and are sent with each request, then forgotten when you reload or close it.
With a Google account: the same, plus what Google Sign-In returns, your Google account identifier, e-mail address, name and profile picture address. Nothing else is requested from Google.
Your files contain bibliographic metadata about other people (author names, affiliations). They are processed only to provide the service to you.
How long
Without an account, a study is deleted one week after it was imported, and a corpus imported into the analysis application after 24 hours.
With a Google account, it is deleted 30 days after it was imported.
In the cleaning application, a workspace is deleted entirely once nobody has used it for one week without an account, or for 30 days with one. Without an account, closing the browser tab already makes it impossible to reopen. You can delete a study yourself at any time from “My studies”.
Cookies and browser storage
A session cookie, only if you sign in (30 days); a random anonymous identifier, which designates your workspace and tracks nothing, a cookie (one year) in the analysis application, and in the cleaning application the browser tab's own storage, erased when you close it; a sign-in state cookie (10 minutes) that protects the Google sign-in.
Your browser also keeps, for you alone, a few preferences (theme, open study) and the analysis report basket. They never leave your browser.
There are no advertising or audience-measurement cookies.
Services that receive data
Google, only if you choose to sign in with it.
During cleaning, with your own API keys: Crossref, OpenAlex, Semantic Scholar, GeoNames and ROR. They receive what each lookup needs, titles, DOIs, author names, affiliation text, and apply their own terms.
The analysis interface loads its font from Google Fonts, which therefore sees your IP address.
Security
Traffic is encrypted (HTTPS). The API keys of an account are encrypted at rest; without an account they are never stored. Each account and each anonymous workspace has its own folder on the server: no one can open another person's study.
Your rights
You can access, correct and delete your data, and object to its processing. Delete a study from the application, or write to us and we will delete your account and everything attached to it.
You may also lodge a complaint with the data protection authority of your country.
Questions, access or deletion requests: [email protected], [email protected]