PLACEHOLDER. Draft - legal text to be provided by the owner's counsel. This page is not a legal agreement or policy.
Facts about the product today (input for counsel)
- The public website loads no third-party scripts, fonts or analytics and sets no tracking cookies. The Light/Dark theme choice is kept in the browser's local storage.
- Signing in sets one session cookie (httpOnly) used only to keep you signed in.
- The contact form stores the name, e-mail address, organisation, topic and message for the platform team. The IP address is not stored with the message; it is used briefly to limit how many messages one address can send.
- Each organisation's records are separated in the database (row-level security). People see only the projects and records their role allows.
- Secrets such as integration credentials and two-step verification keys are stored encrypted.
- Incident records are designed not to hold personal health information.
- Where data is hosted (region) has not been decided yet (owner decision D-01).