researchJobsPrivacy notice
Last updated: 17 September 2026
Who is responsible
researchFunding is operated by Jing, a private individual established in Sweden. Contact: jj.europe@hotmail.com.
What we store and why
- Without an account: no personal data is stored by us. No analytics or advertising cookies are used.
- Account: your email address, when the account was created and last used, and the calls you save. Purpose: providing the account you asked for (Art. 6(1)(b) GDPR).
- Sign-in: single-use sign-in links (stored only as a hash, valid 15 minutes) and a session cookie (valid 30 days, stored only as a hash on our side). This cookie is strictly necessary for signing in.
- Abuse protection: a hashed form of your IP address and email address in rate-limit counters, deleted after two days; Cloudflare Turnstile checks the sign-in form for bots. Legal basis: our legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR).
Service providers
- Cloudflare (hosting, database, security). Account data is stored in a database restricted to the EU.
- Resend (sending sign-in emails, EU region).
Both are processors bound by data processing agreements. Where they are established outside the EU, transfers rely on the EU–US Data Privacy Framework or standard contractual clauses.
How long we keep data
Account data is kept until you delete your account. Sessions expire after 30 days, sign-in links after 15 minutes (removed within two days), rate-limit counters after two days.
Your rights
You can delete your account at any time on the account page, and download a copy of your data at any time from /api/me/exportwhile signed in. You also have the right to rectification, restriction and objection, and to lodge a complaint with a data protection supervisory authority.
Our lead supervisory authority is the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY) — imy.se. You may also complain to the authority in your own country of residence or place of work.
How quickly we answer. We reply to a request within one month of receiving it, as Art. 12(3) GDPR requires. If a request is complex we may extend that by up to two further months, and we will tell you within the first month if we do. Answering is free; we charge nothing for a first copy of your data.
Funding data
Funding information comes from public sources listed on the data sources page. If an entry concerns you and should be corrected, please contact us.
Researchers named in awarded-grant records
Our grant pages list awarded projects together with the name of the principal investigator, their host institution and country, the project title and abstract, the panel, and the amount and year of the award.
Where it comes from. We did not obtain this from the researchers themselves. It is taken from the funders' own published results — the European Commission's CORDIS database and the European Research Council's published result lists, both issued under an open licence. We publish the names as those sources publish them, and we do not combine them with any other personal data.
Why we may do this. Our legitimate interest in providing a searchable record of publicly funded research (Art. 6(1)(f) GDPR). The assessment behind that balance is written down and available on request. These are professional achievements already published by public bodies, which is what makes the interest outweigh the limited further intrusion of indexing them.
What you can ask for. You may object to the processing (Art. 21), ask for correction (Art. 16), or ask for removal (Art. 17). We can suppress an entire record or remove only the name while keeping the anonymous project data, whichever you prefer, and a removed name is recorded as removed so a later data refresh does not reinstate it. Use the data request form or write to us.
Cookies
| Cookie | Purpose | Lifetime | Category |
|---|---|---|---|
__Host-rf_session | Keeps you signed in. Set only after you sign in. | 30 days | Strictly necessary |
cf_clearance, Turnstile cookies | Cloudflare's anti-abuse check on the sign-in, registration and report forms. | Session to 30 days | Strictly necessary |
We set no analytics, advertising or tracking cookies, and we embed no third-party scripts other than Cloudflare's anti-abuse check. Both cookies above are strictly necessary under Art. 5(3) of the ePrivacy Directive, so no consent banner is required; if that ever changes, this page changes with it.
Your browser also stores your light/dark theme choice locally. That is not a cookie, is never sent to us, and stays in your browser.
International transfers
Account data, sessions and saved items are held in a database restricted to the European Union, and files in EU-jurisdiction storage.
One exception, stated plainly. Our similar-grant search uses Cloudflare Vectorize, which offers no EU residency option, so those records may be processed outside the EU. Vectorize holds only the numeric representation of a grant abstract together with the grant's identifier and two non-personal filters (panel and year). No name, email address or account data is sent to it, and nothing about you as a visitor is. Transfers rely on Cloudflare's standard contractual clauses.