Account privacy
How account information and saved work are handled.
Operator: PhDbyPub, Portugal. For account and privacy enquiries, email phdbypub@gmail.com.
Information you provide
Accounts use your email address and a unique account identifier. Firebase Authentication manages your login credentials; passwords are not stored in the PhDbyPub saved-work database. Firebase also processes technical information, including IP addresses and browser details, to operate authentication and prevent abuse. If Google sign-in is enabled and you choose it, Google also supplies basic account information.
When you choose Save to account or Save file, the selected answers, notes, progress or file are sent to Firebase. Account saving is manual. Home, Start here and the Guidance landing page are public. Log in to read other website content.
Purpose and access
We use this information to provide the account and saving features you request. Account data is restricted to your login through access rules. Authorised service administrators and service providers can access data for operation, security and support; this is not end-to-end encrypted storage.
The legal basis for processing necessary account and saved-work data is performance of the account-service agreement you request under the account terms (Article 6(1)(b) GDPR). Agreeing to the terms and acknowledging this notice does not authorise unrelated processing or marketing.
Accounts do not subscribe you to newsletters. Interest registration remains a separate Google Form.
Storage and devices
Firebase, a Google service, processes authentication and saved account data. Login information is kept for the browser session unless you select Keep me logged in. Saved work is not stored in an offline database on this device. Existing browser-saving options in tools are separate and remain under your control.
Saved work and files use the Firestore database configured in the European multi-region eur3. Firebase Authentication processes login data in the United States. Google describes its processing arrangements and international-transfer safeguards in its Firebase privacy information.
Retention
We retain saved work while your account is in use or until you delete it. We review accounts after 24 months of inactivity. Before deleting an inactive account and its saved work, we send at least 30 days’ notice to its registered email address. You can sign in again or contact us to keep the account, or export your data. These reviews are carried out by the service operator.
Your choices
Use My account to export saved data, remove individual files or saved work, or delete your account. Account deletion removes the stored work and files before removing the login. A minimal deletion marker, containing an account identifier and request time, is retained temporarily to block delayed writes during deletion. Service security logs may have separate retention periods.
Google states that, after an authentication user is deleted, associated authentication information is removed from its live and backup systems within 180 days. Firebase Authentication keeps logged IP addresses for a few weeks. These provider periods are separate from removing your saved work and files from the active application database.
Deleting your account does not delete copies you downloaded, entries saved separately in your browser, or information submitted to Google Forms or LinkedIn. Use the relevant tool or service to manage those copies.
Appropriate content
Save your own learning materials and research summaries. Do not upload identifiable participant data, clinical records, sensitive personal data or confidential records.
Rights and contact
You can request access, correction, deletion, restriction or portability of your personal data, or object to processing where the applicable conditions are met. Contact phdbypub@gmail.com. You can also complain to Portugal’s Comissão Nacional de Proteção de Dados (CNPD) or another competent data protection authority.
My account →