Privacy

Reading the site

You do not need an account to read the site. Our public pages do not set cookies or store information in your browser.

The only site cookie is hc_operator. It is set when an operator signs in at /admin/login, not when you read public pages. It is a session cookie. The signed login token inside it lasts 12 hours.

Fonts are served from this site, not requested from Google.

What you submit

The disagreement and correction form saves your note, the claim or page it refers to, a source name and a required source link. You can also include a quote, your name and your email. Those three fields are optional. Your email is never published.

An editor reviews the submission before anything is posted. There are no reader accounts or other forms that save visitor input.

Contact details and retention

After an editor approves or rejects a submission, its name and email are scheduled for clearing 90 days after review. A nightly job clears those two fields once that deadline has passed. It keeps the submission and accountability record.

Pending submissions do not have a scheduled contact-deletion deadline. Their name and email remain until the submission is reviewed and that deadline passes.

IP addresses and abuse prevention

When you submit a disagreement, the server reads your IP address to limit abuse. It immediately turns it into a keyed hash (HMAC-SHA256), using a new random secret for each server process. Only the hash and request counter are kept in that process’s memory, for up to 10 minutes.

The rate limiter writes neither the address nor the hash to the database or logs. Hashes cannot be matched across separate processes or restarts. Hosting request logs are separate, as described below.

Maps, searches and videos

• Maps load tiles from tiles.openfreemap.org in your browser. That service receives your IP address and the tiles you request. Those requests indicate approximately which area you looked at.
• A search near a location sends the typed query to nominatim.openstreetmap.org from our server. It does not forward your IP address to that service.
• A place page with a video loads a YouTube embed from www.youtube-nocookie.com. Your browser makes an embed request to YouTube. We deliberately use that no-cookie domain.
• The YouTube API at www.googleapis.com is used only by operators importing videos, with an API key. Reading the site does not trigger that API.

Hosting and database

Vercel hosts and serves the site and holds its request logs. Supabase holds the database, including disagreement submissions.

Privacy contact

[Contact placeholder: the Product Owner must provide a privacy contact address for questions about information held about you or requests to delete it.]