What happens to your DNA file and your results at ReadYourDNA, and how to check each point yourself.
The file you upload is encrypted (AES-256-GCM) while it waits, and deleted as soon as its analysis has finished. What stays are the results your reports are built from. If an analysis stops or fails, the file is kept so you can run it again without uploading, and it goes once a run finishes. To analyse your file again later, you upload it again.
No analytics, no advertising, no fonts or scripts from anywhere else, and no cookies for visitors. Every page also tells your browser to refuse anything that does not come from ReadYourDNA (a Content‑Security‑Policy), so even a mistake on our side could not quietly send your data elsewhere.
Check it: open your browser's developer tools on any page, choose the Network tab and reload. Every request goes to readyourdna.com.
Or let a public scanner check it: Webbkoll lists third-party requests and cookies, and securityheaders.com shows the policy the browser receives.
Your results sit in a folder named by a random code on our server in Finland, on a storage volume that is itself encrypted. Nothing in that folder names you: no email address, no username, and not even the name of the file you uploaded, which for some test companies contains your name. Sign-in sessions are stored only in scrambled form, so a copy of our account records would sign nobody in.
You can delete your results, or your whole account, at any time in Settings, and we send you a confirmation by email. Your file and your results are in no backup, so no restore can bring them back. Your account record (email address and settings, never genetic data) leaves our backups within 37 days, every copy included. A receipt for a purchase is kept for seven years, because Austrian tax law requires it.
Our server logs are the only place your IP address is written down, and they are deleted after 14 days. The site's own statistics are counts, with no address, no visitor ID and no record of anyone's path.
Your genetic data is never sold, never used for research and never used to train anything. Five companies work for us under data‑processing agreements:
Hetzner runs the servers in Finland where your file and results are stored and analysed.
Cloudflare delivers the site and carries the traffic between your browser and our server, including uploads.
Google answers your questions to the genome assistant, only if you turn it on.
Stripe handles a payment, and Brevo delivers our emails. Neither ever receives your file or your results, and our emails never say what we analyse.
If ReadYourDNA is ever sold, merged, closed or becomes insolvent, your file and every result derived from it are deleted, never handed over. The full legal text is in our Privacy Policy.
Requests from any authority for user data
Personal-data breaches
Last checked
25 October 2026
Every request and every breach will be counted here. The figures are checked each quarter.
Write to support@readyourdna.com. Martin answers, normally within 48 hours.
Last updated: October 2026
Raw DNA Data Reports for 23andMe & AncestryDNA · About ReadYourDNA · FAQ · Methodology & Science · Pricing · Support and complaints · Legal & Contact · Health Traits · Pharmacogenomics · Carrier Status · Variant Explorer · The Human Karyotype · Privacy Policy · Terms of Service · Accessibility · Consumer Health Data Privacy · Your Privacy Choices · Editorial Standards · Your Data, Checkable · Sample Report · ReadYourDNA and Promethease compared · What is inside a 23andMe raw data file · What is inside an AncestryDNA raw data file · What a chatbot can and cannot do with your raw DNA file · Where a raw DNA file can still be uploaded in 2026
Written, maintained and operated by Martin Pechhacker, sole proprietor, Vienna, Austria. Trade register GISA 40064420. support@readyourdna.com