Privacy
Privacy policy
Data minimization, analytics consent, retention, and security practices for public visitors and staff.
Last reviewed July 21, 2026
Public visitor data
The public site does not require visitor accounts at launch. Search and interaction events are designed to avoid names, emails, authentication data, private profiles, full IP addresses, affiliate credentials, and staff notes.
Optional analytics
Optional analytics require a saved granted preference and respect Do Not Track. Event fields are allowlisted. A reviewed analytics provider and retention period must be configured before events leave the browser event boundary.
Staff and security data
Staff authentication, authorization, audit history, and security events are processed for platform operation and protection. Authenticated responses are private and never placed in the public cache.
Retention and requests
Operational retention schedules and a verified privacy request channel must be finalized by the site operator before commercial launch. Until that channel is supplied, visitors should not submit personal information through the site.