Submission privacy

Private review

Reports and challenges are stored in a project database for review by Human in Control Project through its hosting administration tools. They are not added to the public ledger automatically. Hosting is provided through OpenAI Sites and Cloudflare infrastructure.

What is collected

We store the fields you submit, an optional contact email, a receipt identifier, and a submission time. Email is optional. An hourly keyed network identifier is used to limit spam; the application does not store raw IP addresses. Hosting providers may process operational access logs.

What not to send

Do not send passwords, API keys, financial or medical details, private home addresses, classified material, or material you are not authorized to share. This is not a secure whistleblower channel, and confidentiality cannot be guaranteed.

Publication and retention

The project will review evidence before publication and consider your confidentiality request. Submissions older than 90 days are eligible for routine removal. Information separately retained for an incident review may remain with that review. There is no automatic email notification or guaranteed response time.

Corrections or removal requests

Use the challenge form and include your receipt identifier to request correction or removal. Do not include additional sensitive information. Requests are reviewed by the project; receipt does not mean a request has been fulfilled.