Privacy policy

1. The short version

You can browse the public museum without an account. We do not sell personal information, build advertising profiles, or give sponsors visitor-level data. The submission form asks only for a public domain, but our hosting and security systems necessarily process limited request data such as an IP address and browser information.

2. Information we process

• Domain submissions: the domain, resolved /404 URL, HTTP status, screenshot, generated and curator-edited metadata, moderation status, and Terms version and acceptance time.
• Anti-abuse data: a one-way daily hash derived from the request IP address, plus a truncated user-agent string, used for rate limits and abuse investigation.
• Infrastructure data: Cloudflare and Netlify may process IP address, request headers, timestamps, requested URLs, security events, and delivery or function logs.
• Messages: if you email us, we receive the address, content, and attachments you choose to send.
• Editorial requests: a correction or takedown form may include your name, organization, relationship to the material, legal mailing address, phone number, email address, affected URL, requested action, comments, confirmations, typed signature, and anti-spam request metadata.
• Local preferences: your browser stores the museum display mode and a simple visitor-counter number. These stay in your browser and are not sent to us.

3. Cloudflare Turnstile

The submission form uses Cloudflare Turnstile to distinguish legitimate visitors from abusive automation. Cloudflare says Turnstile processes limited signals such as IP address, TLS fingerprint, user-agent header, site key, and origin for bot detection and service improvement; it does not receive the domain entered in our form. See Cloudflare'sTurnstile Privacy Addendum.

4. Analytics and advertising

We may use Cloudflare Web Analytics for aggregated traffic and performance measurement. Cloudflare describes that product as privacy-first and says it does not collect or use visitors' personal data or track individuals across customer sites. Direct sponsors may receive aggregate reports such as page views or outbound click totals, but not visitor-level profiles or submission data. We do not use behavioral advertising cookies.

Public-page reporting in the Internet Crafters portal

Our Internet Crafters portal also measures activity on public museum, blog, sponsor, about, terms, and privacy pages. Admin pages, private editorial-request forms, domain submissions, and takedown confirmation pages are excluded from this collector. It records page paths, timestamps, page views, link actions, campaign labels, and structural browser errors. Sponsor-inquiry button use, submission attempts, and an accepted form response are separate events; a confirmation is recorded only after the form endpoint accepts the request. We do not send form answers or message contents to analytics.

A session-only identifier and campaign labels may be stored in session storage for public-page reporting. Do Not Track or Global Privacy Control switches this collector to anonymous, minute-rounded page and generic action counts, without session storage, campaign attribution, action details, or browser errors. Page queries, raw advertising click IDs, email addresses, phone numbers, and exception messages are not collected. Contact actions are not unique people or proof that a call or email was completed.

Public-page crawler events include time, path, response status, and user-agent classification. User-agent claims do not verify crawler identity. The portal hashes source IP addresses, retains detailed events for 90 days, and keeps historical aggregates and grouped issues longer. Error alerts are in-app notifications, not automatic emails or support tickets. These limits do not change infrastructure or security logging.

5. Why we process information

We use information to operate the museum, verify and capture public 404 pages, maintain the moderation record, publish approved exhibits, prevent spam and misuse, protect the service, measure aggregate performance, respond to requests, evaluate and document editorial or takedown claims, comply with law, and establish or defend legal claims. Where consent is the applicable basis, you may withdraw it prospectively by contacting us; withdrawal does not affect earlier lawful processing.

6. Sharing and service providers

We disclose information only as reasonably necessary to providers that host, secure, or operate the service (currently Netlify, Cloudflare, and fortrabbit for the Internet Crafters reporting portal); to advisers working under appropriate duties; in a business transfer; to protect rights, safety, and system integrity; or when required by valid legal process. Approved domains, screenshots, source links, and editorial metadata become public. We do not publish submission request metadata or the anti-abuse hash.

7. Retention

Approved exhibit records and screenshots may be retained while the museum operates and for a reasonable archival period. Pending, rejected, and failed submission records may be retained for up to twelve months for moderation, duplicate detection, abuse prevention, and dispute handling, then deleted or de-identified unless a longer period is reasonably necessary for a legal, security, or operational reason. Infrastructure providers control their own log retention under their agreements and policies. Email and editorial requests are retained as needed to handle and document the request, comply with law, and maintain ordinary business records.

8. Security and breach response

We use access controls, signed administrator sessions, transport encryption, rate limiting, private moderation storage, and data minimization. No system is perfectly secure. If a breach requires notice, we will investigate and provide notice as required by applicable law, including Arizona's data-breach requirements when they apply.

9. Your choices and rights

You may ask to access, correct, or delete information associated with a submission or message, object to or restrict certain processing, or request a portable copy where applicable law provides that right. Because the domain submission form does not ask for your name or email, we may need reasonable information to verify that a request concerns you. You may clear local preferences through your browser's site-data controls. We do not sell personal information or use it for targeted advertising, so there is no sale or targeted-advertising opt-out to process.

10. Children and international visitors

The service is not directed to children under 13, and we do not knowingly request personal information from children. The service is operated from Arizona and providers may process information in the United States and other countries, which may have different privacy laws.

11. Contact and changes

Privacy questions and requests may be sent through ourprivate request form or addressed to Internet Crafters, Tucson, Arizona, United States. We may update this policy by posting a revised effective date and will provide additional notice when legally required.