Keep private information private.
Limited planning records
Eterna retains the limited references, signed changes and permissions described on the security page. Your public signing key identifies your account. The plan database contains no profile names or email addresses.
Your external arrangement
Do not send private records, credentials, personal names, institution names or account mappings to Eterna. This version deliberately offers generated identifiers and fixed selections instead of private-content fields.
Hosting and local preferences
Eterna uses a session cookie and may store a sidebar preference. This browser retains a plan fingerprint to detect older or conflicting copies. Your unlocked account key stays in memory until you lock the account, close the page or leave it idle for 15 minutes. There are no marketing analytics, advertising pixels or session-replay scripts.
Removing records
Removing a path clears it from the active plan and shared views. Removing a role removes its grants. Signed change history retains earlier references; exports remain wherever you saved them. Account-wide erasure and backup-retention procedures are still being completed.