Privacy, stated plainly.

Reports are restricted to recipients with valid access credentials. Report contents and evidence are encrypted at rest. The running application and its operator can access plaintext to serve and process reports.

Minimal operational records

The application records security events such as authentication, sharing, and revocation for 30 days. It does not put access codes, report contents, or visitor IP addresses in routine audit records. Hosting and network providers may maintain their own records.

Evidence and backups

Unapproved originals expire after 24 hours or are deleted after approval. Encrypted backups expire on a rolling schedule; deletion from backups is not immediate. Evidence is inspected and reviewed, but complete identifier removal cannot be guaranteed.

No tracking or cloud AI

This viewer uses no third-party analytics, remote fonts, tracking pixels, or external AI processing.