Privacy and data handling

Google Analytics loads only after a visitor chooses "Allow." A decline is stored in the browser. Global Privacy Control or a browser Do Not Track value of 1 prevents analytics from loading.

When allowed, the site sends page paths, page titles, case slugs, download paths, and the domain and path of outbound links. It does not send search text, form contents, source URLs or page query strings. Google may process device and network data under its privacy policy. The site disables advertising storage, Google Signals and ad personalization.

Use the "Analytics settings" control in the site footer to change your choice. Declining disables Google Analytics for this site. Browser blocking tools can also prevent the analytics script from loading.

The intake form does not request a name, email address, account or reply channel. It encrypts the submitted text in the browser. The server stores the encrypted envelope, a random receipt identifier, the day received, an encryption-key fingerprint and the encrypted payload fields needed for local decryption.

The separate correction and right-of-reply form accepts an optional reply email. That address is encrypted with the rest of the request and is used only to acknowledge or follow up on that editorial request.

Cloudflare still processes network metadata needed to deliver the site and accept the request. Browser encryption does not guarantee anonymity or protect a compromised device. Do not submit private allegations, minor-victim identities, medical records, another person's contact information or material that is not already public.

Encrypted envelopes are retained while awaiting editorial review. Rejected material may be deleted during periodic maintenance. Source citations accepted into the public record and the correction history may be retained for as long as the archive is maintained.

There is no guaranteed review date or automatic deletion deadline. Because the form collects no identity or reply channel, the project may be unable to identify a submission from a description alone. Save the receipt if you may later request deletion, and do not use the intake for material that requires a guaranteed deletion schedule.

Send a privacy question or deletion request through the encrypted intake. Include the intake receipt when asking about a prior submission. The form is a notice path, not a promise of a reply or a legal-service channel.

Correction, reply and takedown requests use the corrections process and are handled under the editorial policy.