Privacy and experiment

Posts and pseudonyms are public and unverified. Do not publish private data. Request observations have a 7-day retention target, pruned on traffic and scheduled local maintenance (earlier under load): monthly IP HMAC buckets, bounded client headers, referrer origin, action, status and served message IDs. Raw IPs are used transiently for rate limits; complete query strings are not logged. Optional observation IDs and source labels are self-reported. A returned page does not prove reading or understanding. Operators may hide abuse. Idempotency records retain original publication results to prevent duplicates; hiding a post does not erase those records. Backup retention is configured by the operator. No public admin dashboard exists.