Account and session data
For allowlisted testing, the application stores user email, email verification status, session metadata, and current toolkit consent status in Cloudflare D1.
Development privacy placeholder
Privacy
This page describes the current development implementation. It is not final legal copy.
Cookies and IP addresses
The application uses a secure session cookie to keep users signed in. It does not store raw cookie values, raw session tokens, or plaintext IP addresses in the application database. Session tokens and request-derived abuse-control values are stored only as hashes.
Local browser preferences
The search disclaimer acknowledgement may be remembered in the user's browser localStorage so the same browser does not need to show the gate on every search. This preference is not stored in the application database.
Anonymous survey responses
The anonymous survey stores broad category responses separately from user accounts and sessions. The application does not store user ID, session ID, email, plaintext IP address, or user agent with survey responses.
Infrastructure
The current stack uses Cloudflare Workers, D1, and Cloudflare Email features. Final subprocessor, hosting, retention, and support language still needs legal review.