Account and usage data
We record account security events, sign-ins, IP addresses, browser and device information, and application methods and paths. We never record query strings, passwords, tokens or application bodies.
Our lawful basis is the legitimate interest of securing the service (GDPR article 6(1)(f)). Application activity is kept for 90 days; audit events and sessions for 365 days. Contact the Director of the Laboratory about your data.
All applications