Privacy policy

Information processed during a run

During an online Onsager run, the server receives and temporarily processes the files and settings submitted by the user, including:

• the DESeq2 result files uploaded for the three required contrasts;
• a custom GMT gene-set file, if the user provides one;
• or the name of the default gene-set library selected by the user;
• the analysis options submitted by the form.

What happens to uploaded files

Uploaded files are written to a temporary server folder only for the duration of the run. They are deleted when the run finishes, fails, or times out. TrevixLab does not keep the uploaded file contents after the run.

The output tables generated by the analysis are sent back to the browser. They are not permanently stored by TrevixLab; users can decide whether to load them into the viewer or download them locally.

Information kept in the private log

The private log may include:

• timestamp of the run;
• run identifier;
• IP address;
• browser user agent;
• whether the IP address is recognised in a private known-IP list;
• run status, runtime, output count, and error messages;
• selected default gene-set library, if any;
• whether a custom GMT file was used;
• uploaded filenames and uploaded file sizes.

Information not kept

The private log does not keep:

• the contents of uploaded DESeq2 files;
• the contents of uploaded GMT files;
• the full output tables generated by the model;
• cookies or tracking identifiers set by TrevixLab;
• analytics or advertising profiles.

Purpose and lawful basis

The purpose of the private operational log is to keep the online Onsager runner reliable and secure. It helps detect repeated or automated use, diagnose failures, understand server load, and improve the tool.

The lawful basis relied on for this operational logging is legitimate interests: the interest in running, securing, debugging, and improving a public scientific web tool while keeping the data collected limited to what is needed for those purposes.

Retention

Private Onsager operational log rows are kept for up to one year, then deleted or removed from the active log. This retention period is intended to allow debugging of intermittent problems, monitoring of usage patterns, and investigation of abuse or repeated failures.

The rest of TrevixLab.org

Outside the Onsager online runner, TrevixLab.org is a static personal research website. It does not intentionally collect information through contact forms, comments, accounts, analytics, advertising trackers, or TrevixLab-set cookies.

As with most websites, the hosting provider may generate standard server access logs, and browsers may make ordinary requests for page assets such as images, stylesheets, scripts, and PDFs. The Ubuntu typeface used in parts of TrevixLab's visual identity is loaded from Google Fonts. This means the visitor's browser sends Google the technical information needed to serve the font, such as the IP address and browser headers. TrevixLab does not receive this information from Google or use it for advertising or profiling.

Sharing

TrevixLab does not sell personal data and does not share Onsager run logs with advertisers or data brokers. Data may be processed by the website hosting provider as part of normal web hosting. Information may also be disclosed if required by law or necessary to investigate abuse or security incidents.

Your choices

If you do not want your IP address, browser user agent, uploaded filenames, file sizes, or run metadata to be recorded in the private operational log, please do not use the online Onsager runner. You can still inspect existing Onsager output files in the browser, or contact me to discuss alternatives.

If you use the online runner, please upload only de-identified analysis results. Do not upload files or filenames containing names, patient identifiers, or other confidential information.

Your rights and contact

Marco Trevisan-Herraz operates TrevixLab.org and is the controller for the operational information described in this policy.

You can contact me to request access to, correction or deletion of identifiable log information, to ask for processing to be restricted where applicable, or to object to processing based on your particular situation. Because the logs are limited and may not identify a visitor reliably, fulfilling a request may require enough information to locate the relevant entry.

Contact: marco.trevisan@newcastle.ac.uk

You also have the right to raise a data-protection concern with the Information Commissioner's Office.