Privacy Policy

Last updated: 13 March 2026

Introduction

JournalFilter ("we", "us", "our") operates the website journalfilter.com. This Privacy Policy explains how we collect, use, and protect information when you visit our website.

Information We Collect

JournalFilter is designed with privacy in mind. We collect minimal data:

• No user accounts: The main JournalFilter website does not require registration or login for general browsing.
• Administrator authentication: The blog management section uses Google Sign-In restricted to a single administrator account. Google provides us with the administrator's name and email address solely for authentication purposes.
• Cookies: We use a session cookie (jf_blog_session) for administrator authentication. No tracking cookies are used for general visitors.
• Server logs: Standard web server logs may record IP addresses, browser type, and pages visited for operational and security purposes.

Third-Party Services

We use the following third-party services:

• Google Sign-In: Used exclusively for administrator authentication. Subject to Google's Privacy Policy.
• LinkedIn API: We use LinkedIn's OAuth 2.0 to allow the site administrator to authorize posting of curated research articles to the JournalFilter LinkedIn page. An OAuth access token and refresh token are stored server-side to maintain this connection. No LinkedIn data from visitors is collected. Subject to LinkedIn's Privacy Policy.
• Bluesky (AT Protocol): We post curated articles to a Bluesky account. No Bluesky data from visitors is collected.
• PubMed / NCBI: Article data is sourced from the National Library of Medicine's PubMed database.
• Unpaywall: Used to find open access links for published articles.

How We Use Information

Information collected is used solely for:

• Authenticating the site administrator
• Publishing curated research articles to our blog and social media channels
• Maintaining and improving the website

Data Storage and Security

All data is stored on servers located in Germany. We employ industry-standard security measures including HTTPS encryption, secure session tokens, and restricted access controls.

Data Sharing

We do not sell, trade, or transfer personal information to third parties. Information may be shared only as required by law.

Your Rights

Under the GDPR, you have the right to access, correct, or delete any personal data we hold. Since we collect minimal data, this primarily applies to server logs. Contact us to exercise these rights.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by the "Last updated" date above.

Contact

For questions about this Privacy Policy, please contact us at [email protected].