Privacy

What we keep and what we do not

This site is built to keep as little as possible. Here is the complete list.

The petition

We keep the pseudonym or initials and the city you choose. If you tick "initials only", the name you typed is thrown away and only the initials are stored.
Faculty, role and testimony are optional. If you fill them in, only moderators see them. They are never shown publicly.
We do not ask for an email, a phone number or an ID.

The file you upload is cleaned immediately: photos are re-encoded without EXIF/GPS, MP4 videos are re-packaged without metadata. The original file is never stored on disk.
We keep the cleaned file, the day, the category, the place and the description you write.
Every submission waits in quarantine. Nobody sees it publicly before a moderator approves it. If it is rejected, the file is overwritten with zeros and deleted.
A moderator can blur faces before publication. You can also ask for it in the form.

We do not store your IP address and do not write it to any log. The site has no access logs.
To stop automated signing we use a keyed hash of the IP address and the day. It lives in a separate table, is not linked to any signature or submission, and is deleted after 2 days.
So that moderators can see how many people are on the site right now, each open page sends an anonymous random number every 45 seconds. It is kept only in memory for two minutes, is never written to disk and is not linked to your IP address, a signature or a submission.
We use no cookies, analytics, ads or outside services. The site stores nothing in your browser.

The site is served through Cloudflare, which sees its visitors' IP addresses in order to deliver the service. Cloudflare Turnstile may be used to tell bots from people.
For this reason we do not promise absolute anonymity. If your risk is high, open the site with Tor Browser and do not use a work or school device.

A contact address for deletion requests will be added before publication.