Privacy and data

Updated September 13, 2026

Browsing and analytics

You can browse public Cartis research without an account. Cartis uses Vercel to host the site and provide traffic and interaction analytics, such as page views, source clicks and saved-record actions. Our custom interaction events do not include your email address, search text, feedback text or collection titles. Hosting and authentication services also process technical information needed to operate and secure the service.

Accounts and saved records

Cartis uses Supabase for account authentication and account data. Creating an account involves your email address, account identifier and authentication/security information. Saves made without signing in stay in browser storage on that device. Signing in enables account-linked watchlist synchronization. You can remove saved items from your watchlist.

Feedback and research requests

The feedback and request forms prepare information locally in your browser and use your email application to contact Cartis. Preparing a draft does not submit it. If you send it, Cartis receives your email address and the message contents and can use them to respond and improve the service. Avoid including confidential client information.

Shared collections and downloads

A shared collection URL contains its title and selected public record IDs. Anyone with that URL can read those selections. Do not include confidential information in a collection title. Evidence baseline files are compared in your browser rather than uploaded by the comparison tool; copies you download remain under your control.

Questions and deletion requests

Contact hello@cartis.io with a privacy question or a request to delete your account and associated saved records. Include the account email so we can verify and locate the request. Clearing browser storage removes local anonymous saves from that browser; it does not delete an online account.