Eyewitness privacy note

Anonymous reports

When you post anonymously, the published post shows only “Anonymous eyewitness”. We store with the post only: headline, text, category, the optional location you typed, your photos, the time rounded to 15 minutes, and the moderation result. We do not store your user ID, email, IP address, browser/user agent or any device fingerprint with the post.

Photos

Photos are re-encoded in your browser before upload, which removes EXIF data including GPS location and camera details. Our server also strips any remaining metadata segments and rejects files it cannot clean. Note that the picture itself (faces, street signs, reflections) may still reveal where you were.

Sign-in

You must be signed in to submit, to deter spam. Your session is checked at the moment you submit, and the link between your account and your post is never stored. Our sign-in provider (Supabase) keeps its normal account records (e.g. your email and sign-in times), as for any account.

Rate limiting

To prevent abuse we keep a short-lived counter keyed by a salted, one-way hash of your IP address and of your account. These counters expire within one hour and are never stored with, or linked to, your post.

What we cannot control

Our hosting provider (Cloudflare) and sign-in provider may keep standard request logs (such as IP addresses) outside our control. For maximum safety, use a VPN or Tor, avoid identifying details in your text and photos, and consider posting some time after the event.