YOUR INFORMATION.
YOUR COMMAND.

Private signatures

We store your email, private name, optional ZIP and state, signature consent text hash and timestamp, verification time, and separate optional updates preference. Only verified, unrevoked signatures enter the public count. There is no public signatory list.

Membership and public content

Membership stores your email, public pseudonym, verification time, and optional updates preference. Approved posts and comments expose your pseudonym, contribution, and submission date. Pending and rejected content is visible only to moderators. Pseudonyms do not guarantee anonymity.

Email and service providers

The deployment design uses Cloudflare Pages and D1 for hosting and storage and Resend to deliver verification messages. If enabled, Cloudflare Turnstile processes an anti-abuse challenge. Your email must be sent to the delivery provider; it is stored privately in D1 to support verification and account removal. It is not a public hash or a claim of encryption at the application layer. Operator and provider access must be restricted before launch.

Cookies and abuse prevention

A Secure, HttpOnly, SameSite session cookie lasts seven days after verification. It is necessary for account actions and membership submissions. We use salted IP-derived rate-limit keys, not raw IPs in the application database. Hosting providers may process connection metadata under their own policies. This site uses no advertising trackers or third-party analytics.

Retention and deletion

Verification links expire after 24 hours and work once. The operator must run the documented cleanup daily to remove expired/consumed tokens, expired sessions, expired hourly abuse keys, and moderation audit entries older than 90 days. Pending verification payloads are kept until cleanup. Verified participation and moderation submissions remain until account deletion or a documented moderation decision.

Withdrawing a signature removes it from the count and clears its name and location fields; the private email and consent record remain for account management until deletion. Account deletion removes the email, signature, membership, pending links, sessions, and submissions from the active database. Non-content moderation audit IDs can remain for up to 90 days. Provider backups may persist according to the launch operator’s retention policy; backup duration and legal contact must be published before public launch.

Exercise your choices

Visit Manage my participation with a verified session, or request a fresh sign-in link using your verified email. Withdraw your signature, opt out of updates, or permanently delete your account and contributions. Deletion cannot retract copies already saved by readers.

Launch transparency

This source candidate has not established a live operator, support address, provider retention schedule, or jurisdiction-specific privacy process. Those details are public-launch prerequisites. No real email delivery or data processing is claimed by this isolated build.