Privacy

FLAG FOR LEGAL REVIEW. This notice describes the current build. It should be checked against applicable privacy and data-protection rules before launch.

Information the directory can store

• Admin name, email, password hash, role, and sign-in session
• Report and contact email addresses and messages
• IP address and user agent on admin sessions, audit logs, and rate limits
• An age-confirmation cookie that stores only a yes token, not a date of birth
• Listing images uploaded by an editor

Public pages do not put email addresses, IP addresses, or password hashes in URLs or API responses. Location APIs return place names only.

The age gate does not ask for a name, date of birth, or identity document.