Loading…
Loading…
Effective and last reviewed: July 31, 2026
The public archive requires no account. We do not use advertising identifiers, political profiling, cross-site tracking, or production behavioural analytics.
The hosting provider processes standard request metadata such as IP address, user agent, requested URL, time, and security signals to deliver and protect the site. The application does not store a visitor profile. A locale cookie and local browser storage may remember language, colour theme, saved queries, offline records, and reading preferences; these stay functional and are not used for advertising.
When you submit a contribution, we collect the fields you enter, including your email address and optional name, plus consent version, language, time, and a daily rotating one-way request fingerprint used for abuse prevention. Contact details and the complete payload are encrypted before database storage. The tracking number contains no personal information; a separate high-entropy token protects the private status link and is stored only as a one-way hash. Submissions never publish automatically.
Newsletter signup collects an email address, language, selected categories, consent version and time, and delivery/consent events. The address is encrypted; a keyed one-way index prevents duplicate subscriptions; confirmation tokens are stored only as hashes. The unsubscribe capability is stored as both a one-way hash for verification and an encrypted value so each requested issue can contain a working private unsubscribe link. A subscription remains inactive until double opt-in. Our transactional email provider receives the address and message needed to deliver confirmation and issues.
The archive documents public office-holders and political activity from public-interest sources. Historical claims, living-person records, quotations, images, and rights information are governed by the evidence, corrections, and living-person policies. A contribution does not become a public historical claim merely because it was submitted.
Production access is limited to the accountable project operator and authorized reviewers. Database backups are encrypted and restore-tested. We keep submission and consent records only for archive review, correction, legal, security, and suppression purposes. The present system does not promise automatic deletion on a fixed date; verified deletion or correction requests are handled through the contribution channel and recorded in the audit trail.
Every newsletter issue provides a private preferences and unsubscribe link. You may request access, correction, or deletion of contribution contact information, report a privacy concern, or challenge a public record. Provide your tracking number where possible. Removing contact information does not require removal of a separately verified public-interest fact.
The archive uses its hosting and database providers to operate the site and, when configured, a transactional email provider for requested messages. We do not sell personal information. We disclose it only to operate the requested workflow, protect the service, comply with law, or respond to a valid legal process.