Privacy

If you only visit

• No analytics, no advertising and no third-party scripts or fonts: every page, font and map tile is served by FRAMES itself, so visiting tells no one else.
• The web server keeps technical logs (IP address, time, page requested, browser, how long the page took and, if you are signed in, which account made the request) to run and protect the service. They are deleted automatically after at most 90 days.
• Two cookies at most: csrftoken, which protects forms against forgery, and sessionid, set only when you sign in and ended after 12 hours without use. Neither tracks you, and a visit stores nothing else in your browser.

Observers with an account

• Your name, institutional email, institution, role and username, to sign you in and to credit the field data you record.
• Your password is stored only as a one-way hash: no one, including the administrators, can read it.
• While you type a new survey, a draft of it is kept in your own browser's storage, so a closed tab or an expired session does not lose it. The draft never leaves your browser, and it is removed when the survey is saved or you discard it.
• When you add or change survey data, a place, a species or its photos, FRAMES records the change with your name and the time (the audit trail), so the scientific record stays traceable. Each record is kept for 5 years, then removed.
• To stop password guessing, a failed sign-in records the username tried and the IP address it came from. 5 failures lock that pair for 15 minutes. The record is cleared when you sign in successfully, and otherwise expires.
• To stop a reset or confirmation email being sent over and over, each password reset counts once against the IP address it came from and against the email address asked for (stored only as a one-way hash), and each email change against your account. The counts are deleted within a day.
• A new email address replaces the old one only when you open the link sent to the old one, so someone using your session cannot move your account to their address.

Observers named in survey data

• Each observation records who counted the fish. This is part of the scientific record: it lets results be checked and observer effects be studied.
• The Survey Explorer shows the names of the most active observers publicly, as scientific attribution, the way data papers credit the people who collected the data. Site observers, who have no account, appear by name only.
• The public data downloads, and the versioned copies deposited in Zenodo, name the observer of every count the same way, so every observer's name appears there, not only the most active. They hold no email, account or edit history.
• Anyone who prefers not to be named can ask: an administrator then shows them as "Anonymous observer", at the same place in the ranking and in every later download. A copy already deposited in Zenodo cannot be changed, but the next version follows the new setting.

Species photos

• Uploaded photos have their embedded metadata removed before they are stored, including any GPS position a phone records with the picture.
• Photo captions, credits and references are shown as entered.

Your rights and how to ask

Under Brazil's General Data Protection Law (LGPD, Lei 13.709/2018) you can ask to see the personal data FRAMES holds about you, to correct it, to delete it, or to stop being named publicly.

Some data is part of the scientific record. Observations you recorded are kept so published results stay verifiable; on request, public pages show you as "Anonymous observer" while the observations remain.

Contact the FRAMES team at LBMM, Universidade Federal de Santa Catarina.