Citeflora / Data and privacy

Your research workspace.

Citeflora stores imported source snapshots, proposed records, review notes, and review history in Cloudflare D1. A random HttpOnly cookie associates the workspace with this browser for 30 days. There is no account or cross device synchronization.

What leaves your browser

Vercel serves the application and forwards its API requests to the Citeflora Cloudflare Worker. Source text is processed by deterministic rules in that service. It is not sent to a language model. Literature searches go to Europe PMC and taxonomy queries go to GBIF. Both services receive the search terms needed for those requests.

What to import

Use public or explicitly permitted research material. Do not import private patient information or restricted community knowledge. A publication licence does not by itself grant community permission.

Your portable copy

Use Export evidence to download your sources and reviews. Clearing browser cookies removes this browser’s access to the workspace; it does not delete server records. This version has no account recovery or self service deletion interface. An expired cookie does not promise deletion of the saved records.

Updated 3 November 2026. No advertising or third party analytics code is included in the application.