No trackers.
No ads.
We sell nothing and have nothing to gain from your data. This page says exactly what happens to it — briefly, without the legal padding.
01 — Third partiesThere are none
The site loads no script, font or asset from another domain. The fonts are hosted by us, not by Google. We use no Google Analytics, no Meta Pixel and no other tracking tool. A strict content security policy (CSP) blocks any attempt to load external code at the browser level.
02 — AccountWhat we keep
- The code name you chose.
- The passphrase, never in the clear — only a bcrypt hash, which cannot be turned back into the passphrase.
- The clearance code you came in with, so we know who brought whom.
- Whatever you add to your profile yourself: avatar, status, links, track.
We ask for no e-mail, no phone number and no real name. You owe us none of it.
03 — LogsWhat gets recorded
Like any server, we keep ours running and defend it from abuse. For that we retain — temporarily and capped — page views, the IP address and the browser type, plus security events (failed sign-ins, rate-limit breaches). We build no advertising profiles and we share nothing with anyone.
Your session lives in a cryptographically signed cookie, marked httpOnly and SameSite=Lax. It is not a tracking cookie — it only keeps you signed in.
04 — Your rightsDeletion
You can ask for your account and its data to be deleted at any time, through a ticket. Case files published in the archive are editorial content and are handled separately.