Privacy notice: operator review required

This pilot notice is a draft. The operator must publish approved entity, contact, purpose, evidence, retention, and lawful-processing details before collecting real sensitive information.

Private checking and public publication

Checking consent and publication consent are separate. Professional applications stay private until manual approval and explicit publication. Public responses exclude legal identity evidence, full private identifiers, internal notes, private email, and reporter information.

Evidence and retention

Evidence is encrypted in private storage and quarantined before scanning and safe preview. Proposed pilot limits are 30 days after a final identity decision for sensitive identity evidence, 90 days for other final-case evidence, and 30 days for abandoned files. These are operator-reviewed proposals, not legally mandated periods. Justified appeal holds have a scope and expiry.

Your requests

Authenticated users can request their own data export or deletion from the dashboard. Deletion removes public access promptly and purges originals, previews, and quarantine through controlled processing. An external deletion ledger prevents older snapshots from republishing deleted records.

Backups and analytics

Encrypted backups rotate with a proposed maximum 30-day retention window. Recovery applies deletion events before public traffic. First-party analytics use aggregate outcomes and do not store raw personal searches or visitor identities.