Privacy

What we don't store

• Your IP address. Never written to our database. For spam control we compute a one-way hash of your IP combined with a salt that changes daily, store only that hash, and delete it after two days. Once the salt rotates the hash cannot be matched back to any address.
• Your email. Not required to post.
• Your name. Not required, not requested.

What we do store

• Your post. Obviously.
• A random browser token. Lets you manage your own post from the same browser. It's random, holds no personal information, and is not linked to anything else.
• Uploaded images, stripped. Every upload is re-encoded server-side, which destroys EXIF metadata — including GPS coordinates and device identifiers — before the file is stored.

If we're asked to identify a poster

We would not be able to comply, because we do not hold the information. This is deliberate. A system that can identify its users will eventually be made to.

What we ask of you

Anonymity has limits we can't enforce for you. If you describe an incident only three people witnessed, name your exact team size, or give dates precise enough to narrow it down, you may identify yourself regardless of what we store. Write about patterns rather than single identifiable events.