Reading the site and the claims
Reading pages, the claims viewer and the read-only API needs no account and sets no cookie. There are no analytics or advertising scripts. To limit how many requests one address can make, the service counts requests per address in memory for one minute; the address is not written down. The request log keeps the time, the path and the answer's status code, not the address.
The pages load their typefaces from Google Fonts, so your browser asks Google's servers for the font files.
Asking for a subject to be added keeps the name and link you give, with a keyed one-way hash of your address to limit how many reports such requests can start.
If you sign in with an API key
Signing in sets one cookie that holds a random token, not your key. It lasts until you sign out or the session is ended. Each request made with a key is logged with the key's id, the time, the path and the status, to enforce the key's limits and to report its use.
If you ask for access
The form keeps your name, email address, organisation and what you would use the API for, with a keyed one-way hash of your address to limit how often one address can send it. A request is deleted by hand once it has been answered.
If you reply to a claim
Every claim's page has a reply form at the foot. A reply to a claim keeps your name, role, statement and any link you give, with your email address so we can contact you about it, and a one-way hash of your address to limit replies to five a day. Nothing is shown until it has been read and approved. An approved reply shows your name, role, date, statement and link on the claim. Your email address is never shown, and it is deleted 30 days after the decision. A reply that is not approved is deleted 30 days after the decision, and a reply not yet decided 30 days after it arrived is deleted then, with your email address. The hash of your address is keyed with a secret, so it cannot be turned back into the address.
The people the claims are about
The service covers public figures and organisations, from their public professional statements only: nothing about private life, family, health, home or location, and no guesses at motives. It stores short quotes with their source links, never whole articles. Claims from posts on X are removed once a check finds the post deleted. A subject, or someone acting for them, can reply to any claim, as above, or write to us.
Where it runs, and who to ask
The service runs on Railway, with its database on a volume there. To ask what is kept about you, or to have it deleted, write to hello@epistacklabs.com.