A movement against surveillance has exactly one credible privacy policy, which is to collect almost nothing and to be precise about the rest. This page is that precision. No legal fog, just what happens with your data at every level.
We set no cookies, run no analytics and load nothing from third parties. Fonts, scripts and images all come from this server. The webserver keeps standard technical logs for security, which rotate away automatically. The site is served through Cloudflare for protection against attacks, which means Cloudflare technically sees traffic to this site the way it sees a large share of all web traffic. We name that honestly rather than hide it, and we treat reducing that dependency as future work.
We learn nothing. You post on your own platforms under their rules, and nothing about it reaches us.
We store the email address you give us, and a name if you choose to leave one, in our own self-hosted list software on this server. Nothing is stored until you confirm the link we mail you, we never share or sell addresses, every message contains a one-click unsubscribe, and unsubscribing removes you. Mail is sent from our own machine, not through a marketing platform.
Your answers may say something about your convictions, and data of that kind deserves the heaviest protection we can give it. So before your submission touches the database, this server encrypts it with a public key whose private counterpart exists only offline, held by one person. After that moment the server itself can no longer read what you wrote. A stolen database, a leaked backup or a compromised server yields ciphertext and nothing else. You receive a reference code with your submission, and mailing that code to us is enough to have the submission deleted. We ask your explicit consent before you submit. A name and an email address are required, because a submission we cannot answer helps nobody, and every other question is optional, so share only what you are comfortable with.
We store which Bitcoin addresses we have handed out and when, and nothing about who requested them. What happens on the Bitcoin ledger is public by nature, which is exactly why every donor gets a fresh address instead of one public donation address that would link all donors together.
This site runs on a server in Iceland, hosted by a provider with a long record of defending privacy, under European data protection law. Backups are encrypted on this server before they leave it, so the backup location can read nothing.
You can ask what we hold about you, correct it, or have it deleted, by mailing [email protected]. For the mailing list the unsubscribe link is faster, and for the questionnaire your reference code makes deletion immediate. We answer within a week.