Baseline notice · 1 August 2026
Public catalog data
Titles, descriptions, creator/source text, tags, and optional HTTPS links are public once submitted. Do not include personal or confidential information.
Anonymous browser state
A random opaque browser token is placed in an HTTP-only cookie when you first submit, vote, or report. The database stores only a keyed digest of that token to make votes idempotent. The raw token is not stored in application tables.
Abuse prevention
Mutation frequency is limited using rotating keyed values. Application tables do not store raw IP addresses. Hosting infrastructure may produce access logs; their retention must be declared by the operator before public launch.
Retention
Vote rows remain while their material exists. Submission retry records expire after 24 hours, and expired rate-limit buckets are eligible for scheduled deletion. Moderation actions are kept as an operator audit record.
No tracking by default
The v1 application contains no advertising identifier, behavioral profile, third-party analytics, external font request, or remote media preview.