PUBLIC EDITION 01 / VERIFICATION IN PROGRESSGEAR / RIGHTS / COLLECTIVE CARE
PROTEST
SUPPLY GUIDE

OUR COMMITMENTS / PLAIN LANGUAGE

Privacy is part of care.

The guide and approved discussions are open to read without registration. Submitting a comment, contacting the editors and using moderator controls have different data practices.

Useful statistics, no participation roster

Public guide pages use Plausible Analytics ↗ for readership statistics, referral sources, supplier-link clicks and shopping-list download/print-button counts. These actions do not establish a purchase, completed download or completed print. Discussion and contact pages, submissions, sign-in, moderator controls and API routes are excluded from analytics. Analytics events contain no comment text, form fields, account identifiers, kit selections or search terms.

We send public page paths, referring website origins and only a small allowlist of generic campaign tags. Other query parameters, URL fragments and referral paths are removed. Plausible processes connection IP addresses and browser information to estimate daily visitors and approximate location, then stores event/session records for aggregate reporting; it says it does not retain raw IP addresses or raw User-Agent strings. Its visitor identifier changes daily. Analytics uses no cookies or persistent browser identifiers. This is limited usage measurement, not a promise of unrecorded visits.

The integration respects Global Privacy Control and Do Not Track signals and does not bypass analytics blockers. It does not request device location, record sessions or use advertising/social tracking pixels. Kit choices and calm-reading settings stay in the current page session; shopping-list files are generated on your device.

The hosting service processes network requests and may retain security or request logs. Signing in is handled by ChatGPT. We cannot promise anonymous visits or the absence of platform records. External suppliers and sharing apps have their own privacy practices.

Comments are moderated before publication

Submitting requires ChatGPT sign-in and consent. We store your chosen nickname, text, topic, time, moderation status and a site-specific account ID. The ID permits author deletion; your sign-in name and email are not saved in the comments table or displayed publicly. A moderator’s authorization information is held privately.

Pending or rejected comments are available only to the author and moderators. Approved comments are public. Moderators may reject, unpublish or delete submissions. Draft-era private comments remain unpublished. Moderation alerts are addressed to the project mailbox and contain a review link and topic, rather than comment text or account IDs.

Nonpublic comments are normally removed after 30 days. Approved comments remain until deleted. Moderation actions are recorded privately for up to 90 days. You can delete your own submissions or request help.

Contact messages and email

The contact form is available without sign-in. It stores your message, category, optional name/nickname, optional reply address, reference and receipt time in a private editorial inbox for up to 90 days. Suspected marketing, retail inquiries, link floods and repeated messages may be held for private spam review instead of being forwarded. Editors can review and release legitimate messages; a receipt does not guarantee immediate email forwarding. Email forwarding to protestsupplyguide@proton.me uses Resend when configured. The sending service and Proton process the message under their own policies; ordinary email is not a confidential medical or legal intake system. Delivery failures remain queued for retry and visible to moderators.

The application uses short-lived keyed tokens derived from the submitting connection’s IP address to limit form abuse. It does not store the raw IP address in form or comment records. Signed form checks expire after two hours and can be used for one new submission. A keyed hash of normalized message text is used for duplicate detection for 24 hours; it is not a public identifier. These abuse-control records expire and are cleared during routine maintenance. The form check needs no puzzle, account or third-party CAPTCHA service. Please omit participant lists, real-time movements, home addresses, medical records, legal intake and other sensitive information.

Private application-data backups are retained for up to 30 days. Deletion does not immediately remove data from those backups, hosting logs, email systems or copies already made by readers. Backup files are restricted to moderators and contain no email-service credentials.

Resend privacy policy ↗ · Proton privacy policy ↗

ACCESSIBILITY / EARLY PUBLIC EDITION

Access is a design requirement.

We aim to meet WCAG 2.2 Level AA. The site includes keyboard navigation, focused headings, skip links, descriptive controls, larger targets, readable text, reduced motion, labelled scrollable tables, printable lists and a calm-reading view.

Use Tab and Shift+Tab to move through controls, Enter to follow links, and Space or Enter for buttons and expandable details. Comparison tables have labelled keyboard-focusable scroll areas. Browser zoom and text-size controls remain available.

Verification limits: source, behavior, declared color-contrast and automated DOM accessibility checks have been completed. Manual rendered-browser, screen-reader, speech-input and 200–400% zoom testing remain outstanding. This is a dated commitment, not certified conformance. The notices do not establish that every access need has been met.

Report a barrier privately through the contact form or protestsupplyguide@proton.me. Explain the task, device and assistive technology if helpful; medical details are unnecessary. No account is required.

PASS THE RESOURCE ALONG.