Privacy &
our shared space.

Anonymous submissions

The confession form does not ask for your name, email, phone number, or account. Stories are encrypted in the database. Authorized editors can decrypt and read them. Submissions retain a category, random reference, consent, and submission time. They are not linked to member accounts.

Please omit identifying details about yourself and others. An edited story may be discussed publicly only with the consent you give on submission. Public discussion can still make a story recognizable. Submission does not guarantee broadcast or a response.

Limits to anonymity

No online service guarantees absolute anonymity. Your internet or hosting provider may have connection records. To reduce spam, this application temporarily keeps a keyed digest of the connection address, not the raw address, for up to 15 minutes. Expired rate-limit entries must be purged by the operator. Production hosting must use HTTPS.

Community accounts

Your pseudonym and approved contributions are public. Passwords are stored using Django’s password hashing. Session and security cookies keep you signed in and protect forms. We do not ask for your email address. Votes are linked to accounts to enforce one vote per poll.

Respect at the table

No threats, harassment, hate speech, doxxing, or personal identifying details. Disagree with ideas respectfully. Contributions are reviewed before publication and may be removed. Discussions and show content are not a substitute for individual professional advice.

External services

Playing a video loads YouTube. Fonts and icons load from Google Fonts and Cloudflare’s public CDN. Those services receive normal connection information. Professional-resource links may lead to other providers governed by their own policies.

Retention and requests

Unreviewed and reviewed confessions are deleted after 90 days by the scheduled retention command. Editors should retain only the material needed for an agreed broadcast. A submission reference can help an operator locate a story; it is not proof of identity. A verified privacy contact must be published before the service opens to the public.