{#- /site/data, "Data & privacy": what the software keeps and sends, from the running configuration (site.data_facts). Never the operator's details beyond what the configuration says. -#}
{% if facts.privacy %}<p class="site-data-lead">This page lists what the AnnZarro software on this site keeps and sends, generated from the server's running configuration. The operator's privacy notice: <a href="{{ facts.privacy.url or (root ~ '/site/privacy') }}"{% if facts.privacy.url and not facts.privacy.url.lower().startswith('mailto:') %} target="_blank" rel="noopener noreferrer"{% endif %}>{{ facts.privacy.label }}</a>.</p>
{% else %}<p class="site-data-lead site-data-warning"><strong>This is not a privacy notice.</strong> It lists what the AnnZarro software on this site keeps and sends, generated from the server's running configuration. The operator of this site has not published a privacy notice here.</p>
{% endif %}{% if facts.operator %}<p>Operated by {{ facts.operator }}.</p>
{% endif %}
<h2>In your browser</h2>
<p>AnnZarro keeps these items in your browser's storage. They stay on your device, are never sent to this server and are not used to track you.</p>
<div class="md-table site-data-table"><table>
<thead><tr><th>Key</th><th>Holds</th><th>Kind</th></tr></thead>
<tbody>{% for key, holds, kind in facts.storage %}<tr><td><code>{{ key }}</code></td><td>{{ holds }}</td><td>{{ kind }}</td></tr>{% endfor %}</tbody>
</table></div>
{% if facts.convenience %}<p>The convenience items (the layout autosave, the last sessions and the recent datasets) are kept between visits.</p>
{% else %}<p>On this site the convenience items (the layout autosave, the last sessions and the recent datasets) are kept only until the tab closes.</p>
{% endif %}<p>&ldquo;Close all panels&rdquo; with its checkbox deletes all of them, and so do your browser's settings. Nothing is kept in IndexedDB, in Cache Storage or by a service worker.</p>

<h2>Cookies</h2>
{% if facts.auth %}<p>This site has sign-in, and sets two cookies, both its own and both needed for signing in:</p>
<div class="md-table site-data-table"><table>
<thead><tr><th>Cookie</th><th>Set when</th><th>Holds</th><th>Lifetime</th></tr></thead>
<tbody><tr><td><code>session</code></td><td>You sign in</td><td>Your signed login: user name, admin flag, sign-in time, last activity, a request token</td><td>Until the browser closes; the server ends it after a period without activity</td></tr>
<tr><td><code>annzarro_login_csrf</code></td><td>The sign-in form is shown</td><td>A random token that protects the form</td><td>10 minutes</td></tr></tbody>
</table></div>
{% else %}<p>This site sets no cookies.</p>
{% endif %}
<h2>Outside services</h2>
<p>All of this page's styles, scripts and fonts come from this server.</p>
{% if facts.mode == 'ask' %}<p>The Gene Set panel can send the genes you selected, the species and your IP address to an outside service, only after you agree (once, or always, for each service). The services this site offers: {{ facts.services|join(', ') }}.{% if facts.publishing %} {{ facts.publishing|join(' and ') }} keep{% if facts.publishing|length == 1 %}s{% endif %} the lists they receive where others can read them.{% endif %}</p>
{% elif facts.mode == 'on' %}<p>The Gene Set panel sends the genes you selected, the species and your IP address to outside services <strong>without asking</strong>: {{ facts.services|join(', ') }}.{% if facts.publishing %} {{ facts.publishing|join(' and ') }} keep{% if facts.publishing|length == 1 %}s{% endif %} the lists they receive where others can read them.{% endif %}</p>
{% else %}<p>The Gene Set panel sends nothing to outside services on this site.</p>
{% endif %}{% if facts.species %}<p>A species name you type may be looked up at NCBI Taxonomy and the European Nucleotide Archive ({{ facts.species_hosts|join(', ') }}); no genes are sent.</p>
{% endif %}{% if facts.auth and facts.mode in ('ask', 'on') %}<p>An account on this site may have fewer of these services.</p>
{% endif %}<p>{% if facts.links %}Links to documentation, gene databases and other sites are ordinary links: nothing is sent until you click one. {% endif %}Datasets come from this server; when it reads one from another address, nothing about you goes with that request.</p>

<h2>Analytics and tracking</h2>
<p>AnnZarro has no analytics, no advertising, no social-media widgets and no tracking of any kind.{% if facts.third_party_login %} The operator has added content to the sign-in page that may load from other servers.{% endif %}</p>

<h2>On the server</h2>
<p>Like any web server, this one receives your IP address with each request. Whether it is logged, and for how long, is the operator's decision{% if facts.privacy %}, described in the privacy notice{% endif %}.{% if facts.auth %} For sign-in the server keeps your user name and a hash of your password.{% endif %}</p>

<p class="site-data-fine">Generated by AnnZarro {{ facts.version }} from this server's configuration. What each item means: <a href="{{ facts.guide }}#what-annzarro-stores-and-sends" target="_blank" rel="noopener noreferrer">the public-site guide</a>.</p>