Most sites write a privacy policy as if you had already agreed. This is a list of what is actually on the desk.
What we store
The words you send. The name you chose. A topic, if you picked one. The times you and we wrote. The status of the case. If you tell us how an answer landed, that note sits with the case too. Internal notes the team makes while thinking — those are never shown to you, and they are deleted with the rest.
If you leave an email address, it is encrypted before it is saved. A person at the desk can use it to write to you. The site does not send mail by itself, and the address is never added to a list. We do not require one to help you.
What we do not store
Your IP address. Your browser. How you found us. A real name, unless you typed one. Payment details — there is nothing to pay. Marketing profiles. Third-party cookies.
Your case key is shown once and stored only as a hash. If you lose it, we cannot look you up. That is inconvenient. It is also the point.
Cookies
One cookie, only while a case is open in this browser, so the key does not have to live in the address bar. It is http-only. It expires. There is no tracking cookie underneath it.
Who can see it
The people operating this desk, through a locked admin page. No contractors. No advertisers. No "partners." If the law ever forced a disclosure we would tell you, unless we were forbidden to.
How it ends
You can erase a case yourself from the case page. We can erase it from our side. We can also set the desk to delete finished cases after a number of days. When a case is deleted, the words, the notes, and the address go with it.