Privacy policy

We collect almost nothing. This website sets no advertising cookies and runs no third-party tracking. If you fill in our contact form we keep what you send us so we can reply. We do not sell personal information, and we do not add anyone to a mailing list without being asked to.

When you use this website

Our hosting provider records standard server logs — IP address, browser type, pages requested, and time of request — for security and to keep the site running. These are retained for 30 days and then deleted.

We do not use advertising cookies, analytics cookies, tracking pixels, or third-party embeds that profile you.

When you contact us

The contact form collects your name, organization, email address, the category you select, and your message. We use this only to respond to you and to understand who is interested in our work.

When you ask to be notified

If you ask to be told when a comment period opens, we keep your email address for that purpose only. Every notification includes a one-click unsubscribe.

What we do not collect

We do not collect payment information on this website. We do not collect special categories of personal data. We do not attempt to identify individual website visitors.

We process personal information because you gave it to us and asked us to respond, or because we have a legitimate interest in maintaining and securing our website. Where we rely on consent, you can withdraw it at any time.

We share personal information with service providers who help us operate — website hosting, email delivery, and form processing. They act on our instructions and may not use your information for their own purposes.

We may disclose information where we are legally required to do so.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have never done so and have no plans to.

Personal information collected through this website is stored on servers located in the United States.

Customer sequence data and results are stored in the United States. Processing infrastructure moves to a United States region on our first federal or tribal contract and no later than the end of 2027. Where data originates from tribal lands or waters, the governing nation is the data steward and sets the conditions for its storage, processing and reuse.

Contact form submissions are kept for two years from last contact, then deleted. Notification lists are kept until you unsubscribe. Server logs are kept for 30 days.

Depending on where you live, you may have the right to:

• Ask what personal information we hold about you
• Ask us to correct it
• Ask us to delete it
• Ask us to stop using it
• Receive a copy in a portable format
• Ask us not to sell or share it, though we do not do either

To exercise any of these, get in touch. We will respond within 45 days, and we will not treat you differently for asking.

Residents of California, Colorado, Connecticut, Virginia and other states with comprehensive privacy laws have these rights under state law. We extend the same rights to everyone regardless of where they live, because maintaining two standards would be more trouble than it is worth.

This website is not directed at children and we do not knowingly collect personal information from anyone under 13.

This policy covers this website. It does not cover the environmental sequence data that Common Measure will process for customers after launch. That data is governed by separate agreements, is stored in the United States, and is subject to commitments on data ownership, tribal data sovereignty and non-disclosure that will be published before launch.

Sequence data from environmental samples is not personal information, but it can carry sensitivity of other kinds — location of sensitive species, and data originating from tribal lands and waters. We treat both accordingly.

If we change this policy we will update the version and effective date above and record the change in our change record. Material changes will be announced.