Privacy
The short version: we collect almost nothing, we sell nothing, your contributions license us to display them, and the scores are editorial opinion grounded in documented fact.
What we never collect
Real names, phone numbers, email addresses (an optional recovery key replaces email reset), precise location, or government ID of any kind.
What we strip automatically
EXIF and location metadata from every photo, stripped server-side before the file touches storage.
What we minimally hold
Short-lived, hashed rate-limiting tokens for abuse prevention only. No IPs in application logs. Retention capped at 14 days, then purged automatically.
Legal requests
We can produce only what exists. A handle and its submissions cannot be mapped to a person, because that mapping is never created.
This page mirrors /safety exactly. Any divergence between the two is a bug.