Privacy
FOSSIL stores as little as it can.
What is stored
- When you save a fossil: your public wallet address, your pin, what was dug up there, and the card style and line you choose. This is public, on your fossil's page and in the API.
- When you sign in: a one-time sign-in nonce (deleted after a day) and a session cookie in your browser that holds your address, signed by the server. No password, no email.
- Answers from Macrostrat, the Paleobiology Database and PhyloPic, cached by place and taxon so the next dig nearby is faster.
- Rate-limit counters keyed by IP address, kept for about an hour.
What is not
No analytics profile, no advertising, no selling of data. Cloudflare, which hosts the site, may collect aggregate traffic statistics. Your browser remembers that you have seen the intro this session.
Third parties
Fonts load from Google Fonts. Digs read public data from Macrostrat, the Paleobiology Database and PhyloPic through our server; your browser doesn't contact them directly.