Privacy Policy

Last updated: July 2026

This policy describes what Bib Check collects, why, and what happens to it. The short version: we store what's needed to run your reference checks and your account, we don't sell data, and you can delete your projects (and everything in them) at any time.

What we collect

Account data: your email address, a salted password hash (or your Google account identifier if you sign in with Google), and sign-in session records (browser and IP address) used to secure your account.
Your documents: the bibliographies, manuscripts and PDFs you upload or that Bib Check locates for you. Account projects are visible only to your account. An anonymous preview is instead protected by its unguessable access link: anyone with that link can view its summary.
Usage records: which checks ran, when, and what they cost, used for your credit ledger and our service accounting.

How your documents are processed

To verify references, excerpts of your documents are sent to third-party services: scholarly databases (Crossref, OpenAlex, Semantic Scholar, arXiv, Unpaywall, PubMed), a web-search provider, and a large-language-model API for verification and claim checking. Only the excerpts needed for each check are sent; your documents are not used to train models.

Payments

Purchases are processed by Lemon Squeezy as merchant of record. Your card details never touch our servers; we receive only the order confirmation needed to credit your account.

Cookies

We set only the cookies required to keep you signed in and to protect against request forgery. If you choose to save an anonymous preview, a short-lived cookie carries that preview into signup. No advertising or cross-site tracking cookies.

Retention and deletion

Anonymous preview source files, downloaded artifacts, report data and access token are deleted seven days after creation unless you save the preview to an account. Treat the preview URL as a bearer secret during those seven days: anyone with it can view the summary. Saving moves the same project into your account and its authenticated retention policy; it does not keep a second anonymous copy.

Deleting an account project permanently removes its files, reports and project-scoped cached lookups. Account deletion removes your profile and sessions; sanitized numeric service-accounting records and purchase records may be retained where security or bookkeeping requires it.

Contact

Questions or deletion requests: contact the operator at the email address published on this site.