Privacy Policy

What we collect

• Account information. If you sign in, we get your email address from Google via Supabase Auth (the authentication provider we use). We don't ask for or store a password — Google handles authentication.
• Content you submit. The DOIs, ISBNs, URLs, and reference text you paste in to be formatted. This is processed to generate your citations; we don't use it to build advertising profiles.
• Usage data. Request counts and, for unauthenticated visitors, IP address — used only to enforce the free tier's daily lookup limit.

Who we share it with

We don't sell your data to anyone. We do share the minimum necessary with:

• OpenAI. Batch and single-source extraction sends the reference text you submit to OpenAI's API for processing. This is how messy, unstructured citations get parsed into structured data.
• Crossref and OpenLibrary. Single-source lookups query these public academic databases with the DOI, ISBN, or URL you provide — nothing else about you is sent.
• Paddle.com. If you subscribe to Premium, Paddle acts as our Merchant of Record and handles payment in full. We never see or store your card details — Paddle collects your billing and tax information directly, under its own privacy policy.
• Supabase. Our database and authentication provider. Your account row and citation-related data live on Supabase's infrastructure.

Your rights

You can request deletion of your account and associated data at any time by emailing support@makecitation.org. We'll confirm once it's done.

Changes to this policy

If we make a material change to what we collect or how we use it, we'll update this page and revise the date above.