Data policy
We accept structured reports into private review. Published observations are limited evidence, never proof of current website status.
A report contains only a public hostname, general task step, issue and outcome, observed time, attempt actor and environment, and optional challenge categories. We do not ask for passwords, cookies, names, account IDs, personal URLs, or conversation text.
Each report requires the user's confirmation of the exact fields before sending. Reports remain private until an operator reviews and publishes them. Anonymous submissions share one unverified source; multiple reports do not prove independent people. Keep the withdrawal token to remove your own report.
Reports may be mistaken or malicious. We cap intake, review before publication, and can hide a report. Public lookup covers seven days. Stored reports have no automatic deletion schedule yet; use the withdrawal token to exclude your report from reads. Missing reports do not mean a site works, and one failure does not prove an outage.