Privacy policy

Controller

The controller responsible for data processing is the operator of MyArboris:

Further contact details are in the legal notice. Legal notice

What data is processed

• Account: your e-mail address and your password. The password is handled entirely by the sign-in service Supabase Auth and stored only in protected (hashed) form; MyArboris itself never sees it.
• Genealogical content: people, relationships, events, places, sources, citations and notes that you record or import from a GEDCOM file. This content can include information about living and deceased people — you decide what you record.
• Files: photos and documents that you upload. Metadata embedded in image files (such as camera or location details) is not removed.
• Settings: your account's language and date format; your theme choice (light, dark, system) is stored only in your browser.
• Technical data: for every page request the servers process your IP address, the time, the requested address and your browser identification, for example in security and error logs.

Purposes and legal basis

We process this data to provide MyArboris to you: your account, your family trees and your files (Art. 6(1)(b) GDPR). We also process technical data to keep the service secure and working and to prevent abuse (legitimate interest, Art. 6(1)(f) GDPR).

Your data is not sold, not used for advertising and not analysed to build profiles. Your family trees are private and are not published on the internet.

Service providers

We use the following service providers to run MyArboris. They process data only as far as their task requires. Some of them are companies based in the United States, so data may be transferred to a country outside the EU.

• Supabase — sign-in (account, sessions) and the database that stores all family-tree content. The e-mails that confirm your address and reset your password are also sent through Supabase.
• Railway — runs the application itself, in a data centre in the EU (Railway region “EU West”).
• Cloudflare — every request to MyArboris passes through Cloudflare's network, which screens it for attack patterns. Uploaded photos and documents are stored privately in Cloudflare R2 and delivered only through short-lived, signed-in links.
• Geoapify — to show places on maps, place names are sent from the server to Geoapify (without your account data). When you open a map view, your browser loads the map tiles directly from Geoapify, which transmits your IP address to Geoapify. Map data © OpenStreetMap contributors.
• GitHub — the regular database backup is created with GitHub Actions and stored in a separate Cloudflare R2 bucket.

Share links

Your family trees are private. Only if you explicitly create a read-only share link can someone without an account see parts of a tree — and even then only names and living/deceased status are shown, never sources, notes, relationships, photos or documents. You can revoke a share link at any time.

Archive links

When you have MyArboris check a link to a supported online archive while recording evidence, the MyArboris server fetches that archive's page to suggest source details. Only the link is sent to the archive, not your account data.

Your own storage

You can optionally connect your own S3-compatible storage. New files are then stored with your provider, and its terms and privacy policy apply to them; availability and backup of that storage are between you and your provider. Your access credentials are encrypted before being saved; the secret key is shown to you once and never again. MyArboris never makes your storage public. The family-tree content itself stays in the MyArboris database.

Cookies and browser storage

The application uses only technically necessary cookies that keep you signed in. The public website itself sets no cookies; Cloudflare may set technically necessary security cookies to fend off attacks. Your theme choice is stored in your browser's storage and is not sent to us.

There are currently no analytics, tracking or advertising services. If an analytics service is ever used, it will only be with your prior consent, and this page will be updated first.

Retention and deletion

Your data is kept for as long as your account exists. You can delete individual family trees in their settings and your whole account on the account page; this also removes the files stored in MyArboris storage. If you connected your own storage (BYOS), MyArboris removes only its references and the stored access credentials — the files in your own storage are deliberately not deleted and stay under your control.

Database backups are kept on a rotating basis (daily, weekly and monthly copies, the oldest up to about six months) and then overwritten. Until then, deleted data may still be contained in a backup; it is not removed from backups individually. How long server and security logs are kept depends on each service provider's settings.

Your rights

You have the right to access your stored data, to rectification, erasure and restriction of processing, to data portability and to object. You can export your family trees yourself as a GEDCOM file at any time.

If you believe that the processing of your data violates data-protection law, you can lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).