Privacy

This site

This site sets no cookies, runs no scripts, and loads no fonts, images or embeds from anywhere else. Every byte it serves comes from the program serving it. There is no analytics of any kind — not self-hosted, not third-party.

Outbound links to the forum and the survey site send no referrer, so neither is told which page you came from.

What is logged

The web server keeps an access log: the time, the page requested, and the IP address that requested it. That log is kept for 30 days and then deleted, and no backup of it outlives that window.

We keep the IP address rather than discarding it because it is the only thing that makes a denial-of-service attack or a scripted abuse campaign tractable. It is a real cost to your privacy and we would rather name it than imply nothing is recorded. It is not used for anything else, it is never joined to a forum account or a survey response, and after 30 days it is gone.

The forum

The forum is a separate system on a separate machine. It has accounts, so it necessarily knows more: a pseudonym, an email address for password resets, and what you post. It publishes its own policy under its own name.

The account system stores a pseudonym, whether you have passed age assurance, and which groups you are in. It does not store your legal name. Age assurance is handled by a third party and returns a yes or no; identity documents are never sent here and never stored here.

The surveys

Survey responses are sensitive information under the Privacy Act and special category data under GDPR Article 9, and are treated that way. The survey site is on a different domain deliberately: its URL gets forwarded, quoted and pasted into group chats, and it must not carry the community's name when it does.

There is no single sign-on between the two. A survey response cannot be traced back to a forum account, because the two systems hold no shared identifier.

Contact

Ask about any of this, or request what is held about you, at privacy@mzzld.org.