Privacy

AtlasDNA is operated by Sergi Adamchuk (natural person). Contact for privacy and takedown requests: admin@atlasdna.app. You can also use the Report a problem form, which does not require an account.

AtlasDNA is a public map of genealogical Y-DNA and mtDNA markers. Each marker marks the birthplace of the earliest known ancestor (or the earliest documented place when the birthplace is unknown).

Account data: Google sign-in identifier, e-mail address (private, for administration only), display name, optional contact information you publish (without it, matches cannot reach you; on a user card it is shown only after a Cloudflare Turnstile check), and interface language. Marker data you publish: haplogroup, test type, surnames on Y-DNA, ancestor notes, map coordinates for the ancestor location, and consent records proving you confirmed publication. Operational data: session cookies, language preference, security and rate-limiting counters that store opaque keys (not raw IP addresses, names or e-mail), and cookieless product analytics events that never include names, haplogroups, coordinates, notes, record identifiers or unmasked URLs.

Only the fields marked public in the product specification: DNA kind, haplogroup, test type, surnames (Y only), ancestor notes, approximate map location, owner display name and owner contact information (contact values only after Turnstile). E-mail addresses, account role, consent hashes and other internal fields are never exposed on the public surface.

Displayed haplogroup names link to FamilyTreeDNA Discover with that haplogroup in the URL. Clicking a name is a request from your browser to FamilyTreeDNA. FamilyTreeDNA is not a processor of AtlasDNA; we do not send haplogroups there ourselves.

Publishing haplogroup labels and related genealogy fields is based on consent (GDPR Articles 6(1)(a) and 9(2)(a)). Account administration, security, rate limiting and the limited analytics listed in the product specification are based on legitimate interest (Article 6(1)(f)).

A marker appears on the map only after the publisher confirms a versioned consent statement that enumerates exactly what becomes public. Consent records are immutable and kept for three years after the related marker no longer exists, then purged. Deleting a marker or the account withdraws consent for further publication and removes the data from public view immediately.

If you publish data about a living minor, you confirm in the terms of service that you have the consent of that person’s parent or legal guardian.

Soft-deleted markers and accounts are hard-deleted after a 30-day grace period. Consent records and admin suspension records are retained for three years after the related marker is gone, then purged. The current database plan has no platform-managed backup retention; once purged from the primary database, the data is not kept in provider backups.

Hosting and functions: Vercel (region fra1). Database and authentication: Supabase (eu-central-1). Map tiles and place search: MapTiler. Analytics: PostHog Cloud EU (cookieless). Sign-in identity: Google, through Supabase Auth. DNS: Cloudflare (HTTP proxy off) and EU.org for the domain registration. Contact-reveal challenge: Cloudflare Turnstile (challenge tokens only; contact field values are not sent to Cloudflare). We do not sell personal data.

Only strictly necessary cookies: the session cookie and the language preference. Analytics stores nothing on the device. There is no consent banner because there are no non-essential cookies.

You can access and export your data, correct it by editing, delete a marker or your whole account, restrict public visibility via a takedown request, and withdraw consent by deleting. To exercise rights without an account, e-mail admin@atlasdna.app or use Report a problem. We aim to respond within 72 hours and to resolve within one month. You may lodge a complaint with a supervisory authority in the EU/EEA member state of your habitual residence, place of work, or of the alleged infringement; in Ukraine, with the Ukrainian Parliament Commissioner for Human Rights.

A public GitHub issue tracker exists for software defects that do not involve anyone on the map. Do not post names, haplogroups, coordinates, e-mail addresses, record identifiers or card links there. GitHub, Inc. (United States) operates that tracker. AtlasDNA does not send Report a problem submissions to GitHub. Anything about someone on the map stays on the form or the e-mail above.

The versioned text shown when publishing a marker is: “By submitting data on this site you agree that it may become public, and you consent to the processing, storage and use of that data. Genetic data is special-category personal data. What may be published includes: haplogroup, test type, surnames on a Y-DNA marker (if any), ancestor notes, ancestor location, and the display name and contact information of the account that publishes the record. You also confirm that you publish data about other living people only with their consent, and data about minors only with the consent of their legal guardians. You understand that published data appears on a public map.”