Privacy

Privacy & anonymity

Anonymous to the public vs. anonymous to us

When you choose "Post publicly as Anonymous," your username and display name are hidden from other visitors on that report or comment. This is not the same as technical anonymity. The platform's infrastructure still processes your submission — including whatever a web server ordinarily logs (e.g. request metadata) and the account record tied to your session — even when your public byline reads "Anonymous."

We do not publicly display: email addresses, IP addresses, authentication provider details, account identifiers, internal user IDs, or device details. We aim to minimize what we collect in the first place, and we do not run additional tracking beyond what's needed to operate the site (rate-limiting abuse, keeping sessions signed in).

If you have a threat model where infrastructure-level anonymity matters (e.g. concern about compelled disclosure), do not rely on this platform's "Anonymous" option as a guarantee against that. We'll never claim otherwise.

What we store

• An account record (username, display name, role) — no password in this prototype.
• The content of reports, sources, and comments you submit.
• A session cookie so you stay signed in.

Prototype notice

This is a working prototype, not a production deployment. It has not yet been through a legal or security review. Do not submit real personal information, real employer confidential information, or anything you wouldn't want stored in an unaudited system.