Privacy Policy

Who we are: Verinome is an independent project operated by a sole trader based in Bulgaria, in the European Union, acting as the data controller for the limited data described in this policy. You can reach us at privacy@verinome.org, and our postal contact details are available on request.

Verinome was built so that your raw DNA file never leaves your device. Your multi-megabyte genome file is read entirely inside your browser and never uploads. To build your report, Verinome sends only the specific marker readouts it needs, about 200 positions, a few kilobytes, not your file and not your name, checks them against our database, and then discards them. The report request also includes a private access credential used to verify payment, so it is not anonymous to the service. Our report code does not persist marker readouts or generated findings. Payment records and infrastructure logs are separate. This policy explains that design plainly, and lists the only data we handle.

The one thing to know first

The raw file stays on your device. Selected genotypes sent for the full report remain sensitive genetic information even without a name. Treat your private report-access link as a credential and do not share it publicly.

Your browser reads the raw file locally. The starter preview is computed locally using the preview data loaded by the page. To generate the full report, the browser sends selected marker readouts, roughly 200 positions depending on coverage, together with your report-access credential to our report service. That service verifies the purchase and returns findings. The original raw file is not uploaded. A separate, explicit choice is required for the additional sensitive-marker section.

What we actually collect

We collect only the minimum needed to run the site, generate the report you asked for, and process a purchase. The table below is the account and site data we hold. Your raw DNA file is not on this list. The marker readouts used to build your report are described just below the table: they are used once and not stored.

The one genetic thing we do process, and how: to build your report, Verinome processes a minimal genetic dataset, the roughly 200 marker genotypes your browser reads out of your file, never the raw file itself. These are special-category data (genetic and health data) under GDPR Art. 9 and "sensitive personal information" under laws such as the CCPA/CPRA. For this minimal dataset Verinome is a controller, and we hold ourselves to the heightened duties those laws impose. We process it on a single narrow basis: your explicit consent (GDPR Art. 9(2)(a)) together with performance of the contract you enter when you ask us to generate your report. We use it only to compute and return your findings, retain it only transiently for as long as that takes, and do not store it afterward. We do not use marker readouts for advertising or sell them. The request is linked to a purchase-access credential for verification; it should not be treated as anonymous.

What we never do

• We never upload, transmit, or store your raw DNA file. The marker readouts we receive to build your report are used once to return your findings and never stored.
• We never sell, rent, license, or share your genetic data, the marker readouts included, with anyone, for any purpose, ever.
• We never share it with insurers, employers, advertisers, data brokers, or law enforcement, and we keep nothing after your report is delivered.
• Google and Meta advertising tags are currently disabled. This does not remove cookies or records created before they were disabled.
• We do not add your purchase email to a marketing list. Stripe and limited order records may retain payment information for receipts, support, refunds and accounting duties.

Payments (Stripe)

Purchases are processed by Stripe, Inc. When you pay, you provide your payment details directly into Stripe’s payment form. Stripe processes them as an independent controller/processor under Stripe’s Privacy Policy. We receive a confirmation and limited billing metadata (such as your email and billing country) to fulfill your order, never your full card number.

Cookies

The analyzer uses browser session storage for the selected marker extract, file metadata and report-access credential so you can return from checkout. Session storage is scoped to the browser tab; closing or clearing that session can remove it. Save the downloaded PDF and your private report-access link. Google and Meta advertising scripts and pixels are currently disabled on all pages. Stripe operates its own checkout and may use cookies needed for payment. Previously set cookies are not removed by disabling our tags.

Your rights

Depending on where you live (for example under GDPR or CCPA/CPRA), you have rights over the limited personal data we do hold, such as the right to access, correct, delete, port, or object to processing, and the right not to be discriminated against for exercising them. To exercise any right, email privacy@verinome.org. Because we do not retain your genetic data after delivering your report, your raw file stays only on your own device under your control, and any request about it is answered by pointing you to that copy.

International users

Generating the paid report involves server processing of selected genetic marker readouts. Server processing and payment handling may occur outside your country; local parsing of the raw file is not a guarantee of local-only processing. Contact privacy@verinome.org for questions about processors and transfer arrangements.

Children

Verinome is not directed to, and may not be used by, anyone under 18.

Changes

We will post any changes here with an updated date. Material changes to what we collect will be highlighted.

Contact

Questions about this policy: privacy@verinome.org.