This policy describes the site as built.
What we collect
If you submit the organization, correction, or contact form, we store the fields you send (for example URL, description, optional email, consent) in a Cloudflare D1 database bound to this project, for editorial review. Submissions are not published automatically and are not exposed in public search or public APIs.
IP addresses
We do not store raw IP addresses. For rate limiting we store a salted hash of the IP with the hour bucket. The salt is a server secret.
Local device storage
The organization checklist can save ticks in your browser’s local storage. That data never leaves your device unless you print or copy it.
Cookies and trackers
This public site does not set analytics cookies and does not include ad trackers. An HttpOnly admin cookie may be set only after a valid admin token is presented on the private moderation view.
Retention
Editorial staff can delete test records from the admin view. Write via the contact form if you want a submission associated with your email removed.