Privacy
This site is used by people whose communities face surveillance and pressure, so we collect as little as we can and tell you exactly what happens.
Pressure check
Answers, community name, location choices and evidence are held in this tab's sessionStorage. Requesting AI tool suggestions also sends internal pressure values, timing, the supplied community name and evidence URLs to our server. The server stores a pressure check record including those fields, language, scale, region and the AI response in PostgreSQL. Authenticated administrators can see pressure check records. Pressure check records are deleted automatically after 90 days, or sooner if you ask us. The daily cleanup also removes expired cached AI output.
Resilience check
Progress and results stay in this tab's sessionStorage. This assessment does not submit its answers to the server. Closing the tab normally ends that storage; browser session restoration can preserve it. Toolkit collections and language preferences use localStorage until you clear them.
Evidence you add
Evidence URLs and descriptions are sent through our server to You.com (ydc-index.io) to search for supporting and challenging sources, and the search results are then sent to Anthropic, through Replit's AI Integrations service, to sort them. We do not directly fetch the pages you link to. Search output is cached for seven days. You.com does not publish a default retention period for its search API; zero data retention is available only on enterprise agreements and is not enabled on our account.
AI guidance
Requests go through Replit's AI Integrations service to Anthropic. Anthropic states that it deletes API inputs and outputs within 30 days, except where content is flagged for a usage policy violation (kept up to two years) or the law requires longer. Replit's own gateway retention has not been confirmed. Pressure totals, timing, community name and evidence context can be sent; pressure check records can contain returned guidance. Do not add names or evidence you cannot safely share.
Analytics
Google Analytics loads only after Accept on the cookie banner, and never on either check, including introductions, questions and results. We do not send answers, evidence, community names or results as analytics events. Cookie settings lets you withdraw consent and removes accessible _ga cookies. The choice stays in your browser's localStorage. The owner reported on 25 October 2026 that Google signals is off, ads personalisation is disallowed in every region, granular location and device collection is off, site search and form interaction tracking are off, and event and user data are kept for two months. The analytics property used for launch still needs to be checked against those settings.
Regional research
Regional contribution is a separate opt-in. It sends internal assessment values, timing and region to the server. Every regional summary, subgroup and auxiliary regional output requires at least 15 contributions in its own group. Timing and urgency categories below this minimum are withheld. Aggregation does not guarantee anonymity. Public regional summaries currently show a revision notice rather than individual results. New contributions are stored as dated daily regional totals, without names, evidence or network/session identifiers in those totals. Regional contributions collected under this system are deleted automatically after 12 months, or sooner if you ask us and we can identify the affected record. We cannot identify one person's answers within a daily total. Older cumulative totals cannot be separated by age; they remain private, excluded from current research, pending a retention decision. Rate limiting and duplicate prevention also process network/session information. Rate-limit records are deleted after 24 hours by a daily cleanup. Cleanup catches up when the application restarts.
Other providers and logs
The site is hosted by Replit and uses PostgreSQL. Cloudflare Turnstile (challenges.cloudflare.com) protects forms and receives browser/network information. Resend (api.resend.com) delivers contact-form and administrative email, not newsletters. API logs record method, route, status and duration, not response bodies. AI cost logs record service, model, timing, token counts and cost. Infrastructure log retention, backup retention and the database hosting provider have not been confirmed.
Email sign-up
We don't currently run a mailing list. If you signed up before 25 October 2026, email privacy@nationocide.com and we will delete your address.
Your rights
Email privacy@nationocide.com to ask what we hold or to have it deleted. This revised policy has not yet been published.