Data handling
Privacy
This notice describes the behavior implemented in this website build. Operational retention and disclosure decisions still require site-operator approval.
Information submitted through contact
The contact form collects and stores a name, email address, contact reason, subject, and message in plain text for administrative review. An encrypted IP address and a browser user-agent string may also be retained with the message for abuse review.
Abuse prevention
The form uses hidden honeypot fields, submission timing, CSRF protection, and rate limits. Short-lived keyed fingerprints are also stored to enforce submission limits and detect recent duplicate messages, while rejected honeypot events are recorded without retaining the submitted message text.
Cookies and sessions
The application uses a first-party session cookie for security features such as CSRF protection and administrator authentication. The cookie is HTTP-only, uses SameSite=Lax, and is marked secure when the site is served over HTTPS.
Third-party media
Case pages may include YouTube videos through the privacy-enhanced YouTube domain. Loading or playing embedded media may allow that provider to receive technical request information under its own policies. No analytics integration is implemented in this repository.
Public and uploaded content
Published case fields and associated evidence images are intended for public display. Administrative accounts and contact messages are not public. Do not submit material you are not authorized to share.
Retention, disclosure, and requests
The supplied project materials do not establish approved retention periods, disclosure rules, or jurisdiction-specific privacy rights. Those provisions must be set by the site operator with qualified legal guidance. Privacy questions may be sent through the contact form.