Legal
Draft — not yet in forceWhat personal information this site collects, why, how long it is kept, and what a person can require us to do with it.
What follows is the agreed structure of this document, not the document itself. The binding wording is being drafted and reviewed by a qualified lawyer, and it replaces this outline before the site opens to the public. Nothing on this page creates or limits any obligation.
We publish the outline rather than a placeholder because you are entitled to know what a policy will cover before you can read it, and because a page of convincing-looking text that no lawyer has seen is worse than an empty one: there would be no way to tell the two apart.
Each heading below becomes a numbered section of the final text.
Enumerated by category and by source. Must state explicitly that accounts store password hashes, and no payment card data is collected on this domain.
Each purpose named separately, with the legal basis where a basis is required.
Summary with a pointer to the cookie policy, not a duplicate of it.
Categories of recipients, including partner services, analytics providers and hosting. Named where naming is required.
How long each category is kept and what triggers deletion.
Rights under United States state privacy law, including California, and how to exercise each one. Must include the do-not-sell and do-not-share mechanism where applicable.
The service is not directed to anyone under eighteen. Cross-references the underage policy.
Measures in place, described without overpromising.
Where data is processed and on what basis it moves.
How to reach us about privacy and where to escalate.
One channel, and it is a real inbox. There is no support chat widget, no ticket portal and no social media account for this site — by decision, not by omission, so there is exactly one place a message can arrive and one place it can be answered from.
Please put the name of this document in the subject line. Formal notices should follow the specific requirements set out in the relevant policy once it is published.
These are not adapted from a template pack. Several of the clauses only make sense here: no payment is ever taken on this domain, passwords are entered only on account pages, and all visual material is generated rather than photographed. Each of those facts changes the document that describes it, and a generic template would state the opposite.
The thirteen documents are marked as launch blockers in the project’s own route map, which means the site is not considered releasable while any of them is still an outline. The review covers United States federal requirements and state privacy law, and the set is written independently of the sibling site rather than copied across.
Twelve more documents, all at the same stage.