PRIVACY AND RETENTION
What happens to
what you send.
Browsing this site collects nothing: no cookies, no analytics, no storage in your browser. The only personal data we hold comes from the submission forms, and only if you send one.
What the forms collect
- What you type: the resource name, web address, description, compatibility answer, evidence, your connection to it, an optional name, and your email address.
- An optional image (PNG, JPEG or WebP, at most 100 KB) and a note on who owns it.
- Your consent and the date, so we can show what you agreed to.
- A salted hash of your connection, not your address. It lets us limit abuse (at most 3 requests an hour per connection, 3 a day per email address). The hash cannot be turned back into an address.
We do not ask for payment details, passwords or sensitive personal information, and we ask you not to include any.
What we use it for
Only to review your request, to ask you questions and to tell you the outcome. A person reads every request. We do not sell, share or publish it, we send no marketing, and nothing you send is published automatically. We verify ownership ourselves; a form answer alone never proves it.
Where it is stored
In a private Cloudflare D1 database that belongs to this site. There is no public address that reads it, and images are stored there too, never in a public folder. Cloudflare is the processor that hosts the site and the database, and it handles your connection (including your IP address) to deliver the request, as it does for every page. Cloudflare’s own terms apply to that processing.
How long we keep it
The schedule below is the one the code enforces. It runs automatically with normal traffic and can also be run by hand (npm run submissions:cleanup).
| Data | Kept for |
|---|---|
| A request nobody has decided on | 180 days after you sent it, then deleted |
| An image | 30 days after a decision, then deleted (or sooner if you withdraw) |
| A rejected, spam or withdrawn request | 30 days after the decision, then deleted |
| Your name, email address and connection hash on an approved request | 90 days after the decision, then erased |
| The rest of an approved request | 365 days after the decision, then deleted |
| Abuse counters | 2 days |
| The abuse log (what was refused and why, with a hash only) | 30 days |
Your choices
- Erase it now. Use the form below with your reference and email address. Your contact details and image are erased immediately; a request that has not been approved is deleted entirely.
- Correct it. Withdraw the request and send a new one.
- Complain. You may complain to your data protection authority if you think we handled your data wrongly.
The legal basis is your consent, given when you send the form, which you can withdraw at any time as above. Withdrawing does not undo a listing or correction we already published, because that text is ours, written from public sources.
This site does not yet publish a separate privacy contact address. Until it does, the erasure form is the way to act on your data; the site owner should add a monitored address here before relying on this page for requests the form cannot handle.
Withdraw a request
Enter the reference we showed you after sending (it looks like DG-ABCDE12345) and the email address you used. For your safety the answer is the same whether or not they match.