Privacy
How your privacy is protected, and where its limits are
We would rather you understand the limits than trust a promise we cannot keep.
What our software does
- Your report is encrypted in your browser before it is sent, using a public key whose private half never touches this server. The server stores only ciphertext.
- You are given a case key, generated on your device and shown once. It is the only way to read our replies. We never see it and cannot recover it.
- No accounts, no cookies, no analytics, no third-party scripts, fonts or trackers. The site loads nothing from anywhere else.
- Our software does not record IP addresses or browser details, and stores dates only, never times.
- Spam is controlled by proof of work, a few seconds of computation in your browser, rather than by tracking you or using a third-party CAPTCHA.
- Messages are padded so their length reveals little about their content.
What we can and cannot see
| We can see | We cannot see |
|---|---|
| What you choose to write, once we decrypt it with our private key. The date it arrived. A random case id. | Who you are, unless you tell us or your writing reveals it. Your IP address (our software does not record it). Your case key. |
The limits, honestly
- Your network can see that you visited. Your employer, a yacht's wifi, a marina network or your internet provider may log that you reached this site, even though they cannot read what you send. Use your own device on your own connection, not the yacht's.
- Our hosting provider is outside our software. Servers and networks can keep their own technical logs that our application does not control. If you need the strongest protection, use the Tor Browser, which hides your address from the network and from us.
- What you write can identify you. Names, yachts, dates, ports and unusual details can point to you. Think about what you include. Contact details are optional: you can receive our replies with only your case key.
- Files carry hidden information. Photos, PDFs and Office documents contain metadata, such as author names, device models and locations. We do not strip it. Remove it before you attach, or send a screenshot.
- If you lose your case key, we cannot recover it. You can open a new case at any time.
- The law can compel disclosure. We hold only what you send, but if a court orders us to hand over what we hold, we may have to. We will tell you before we pass on anything identifying, where we are lawfully able to.
What happens to what you send
- It stays confidential. Nothing goes to anyone without your permission, and we ask again before sharing anything that could identify you.
- With your permission, a legally qualified lawyer reviews it before it goes anywhere, and we introduce you to the relevant legal team or authority.
- You can ask us to delete your case at any time, using your case key.
Why we publish how it works
The portal's source code is open to inspection, so anyone technical can check that the site does what this page says. The design is documented in the repository under docs/SECURITY-MODEL.md.