Privacy Policy

What we collect

• Account: a username, an optional email, and your passkeys’ public keys or a password hash (never a password). We do not ask for or store your real name.
• Reports: the text, category, event date, a short description of who else was there, and any photos, audio or video you attach, with camera dates (EXIF) kept and shown.
• Location: the place you choose for a report. We only use your device location if you ask us to.
• Credits: an append-only ledger of purchases and reads.

What is public and what is private

• Public: declared reports (exact address and your @username or “Anonymous”); zone reports (block-level zone only, address removed from the text); filing time and hash; category; credibility stars.
• Private: your email, the original text of zone reports, and the address of any zone report. Exact addresses are encrypted at rest with a key kept separately from the database.

The record and deletion

Reports are never edited. If you withdraw a report it stays in the archive marked “withdrawn by owner” with its hash intact. For personal-safety concerns, use the takedown form; we respond within 72 hours.

Payments

Card payments are handled by Stripe. We receive the payment status and amount, not your card number.

Cookies

We use one first-party session cookie to keep you signed in and one to remember your language. No advertising cookies.

Who we share with

We do not sell personal data. We use service providers to run the site (hosting, payments, map tiles, address search). Anonymized, aggregate data may be offered to researchers in the future; we will say so here first.

Children

Scare Reports is for people 18 and older, and reports may not name minors.

Status

This is a draft pending counsel review and is not yet in force.