Privacy

The case file pages are static. We do not need an account to read them.

If you only read

Cloudflare and the DreamHost origin will have ordinary web logs (IP, user agent, path). We do not sell that. We do not run ad trackers.

If you submit

Read the anonymous disclosure. That page is the contract. Short version: we keep the content, a timestamp, a bot score, a coarse location, and a 30-day IP hash for abuse. We do not publish your identity. Infrastructure vendors still see IPs in their own logs.

If you create an account

Supabase stores your email for magic-link login and to attach submissions you choose to track. You can ask us to delete the account. We may still keep an anonymized copy of evidence you sent if it is already in the homicide file.

Law enforcement

If a drop looks like real evidence of a crime, we may preserve it and we may give it to law enforcement. Child sexual abuse material is reported, never hosted.