Privacy
Last updated 15 September 2026
BrainNet is an internal maintenance record for a university research laboratory. It tracks the condition of the lab’s EEG sensor nets: what is broken, what has been repaired, and how each net performs in a saline bucket test. It is used by lab staff, and it holds no research participant data of any kind.
What it stores
If you report a problem without signing in: the name you type, the net you picked, what you said was wrong with it, and when you sent it. The name is also kept in your own browser so you do not have to retype it.
If you sign in with Google: additionally your Google account identifier, email address, name and profile picture, so that the work you record stays attached to you rather than to a spelling of your name.
Photographs. A report, a repair or a bucket test can carry photographs. They are stored privately and are shown only through links that expire. A photograph of the Net Station impedance screen is additionally sent to OpenAI to be read into numbers; those requests are made with retention turned off, and what the model read is kept here alongside the photograph so an odd number can be traced back.
Who can see it
The condition of the nets is meant to be seen: serial numbers, open problems, repairs, bucket test results and supply levels are visible to anyone who opens the site. A lab member has to be able to look a net up before reporting it.
Email addresses, technician invitations, the stored paths of photographs and the raw model output are not visible to any browser. Database permissions withhold those columns from the public and signed-in roles alike, so they cannot be read even by someone querying the database directly from the page.
How Google data is used
Signing in requests only your email address and basic profile. It is used to know who you are and whether you are a net technician. BrainNet asks for no other Google permission and does not read your mail, your files or your calendar.
BrainNet’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Who it is shared with
Nobody. The data is not sold, not used for advertising, and not shared with third parties. It is processed only by the services that run the application: Supabase, which hosts the database and the photographs in Montreal, Canada; Vercel, which hosts the site; and OpenAI, only for the photographs of the impedance screen that a technician chooses to have read automatically.
There is no analytics, no advertising and no third-party tracking on this site.
How long it is kept
The history of a net is kept for as long as the lab owns the net, and for a while after it is retired, because that history is the whole reason this exists. Nothing here is deleted automatically.
Removing your data
To have your name, your account or a photograph you added removed, ask a net technician, or write to dyanitsk@ualberta.ca. A report itself stays, because the net’s condition is a lab record, but the name on it can be cleared.
Contact
Questions about this notice or about data held in BrainNet go to dyanitsk@ualberta.ca.