Privacy for private opinions

What we collect

We keep your message, any name and email address you choose to provide, whether you would like a reply, and the time we receive your message. Your name and email are optional. An email address is required if you request a reply.

To limit repeated submissions, the site derives a one-way code from your network address and the current UTC date. The code changes each day and is kept in the storage path. It is used only for submission limits. This site does not store the raw IP address.

What we do not collect

This site uses no cookies or analytics and creates no marketing lists. Your message is not saved in your browser. The site's submission logs contain only an outcome and a request identifier, never message text, names, email addresses or network addresses.

Storage and access

Production messages are stored in a private Vercel Blob store in Vercel's Washington, D.C. (iad1) region in the United States. Only the site's administrators can read them. There is no public message feed or public route for reading stored messages. Development and automated tests use a local file store instead.

Vercel processes standard request logs as our hosting provider. Those provider logs are separate from the private message records and this site's submission logs.

Retention and deletion

Administrators review messages and delete them within 12 months of receipt. Review and deletion are administrator tasks.

To ask for deletion, send a new message through the private opinion form with the word DELETE and the email address you used for your earlier message.