The short version: this site itself doesn't track you. A small number of third-party services may, when you choose to use a feature that depends on them. We list each one below.
We load the Inter and Raleway typefaces from Google Fonts. Google may log the IP address of your browser when it requests a font file. We chose to use Google Fonts for performance and readability; if this is a concern, modern browsers generally let you block font requests.
The newsletter signup on /newsletter submits your email to Buttondown (a small email-newsletter service based in the United States). Buttondown stores your email address solely so that newsletters can be sent to it. You can unsubscribe in one click from any newsletter we send. See Buttondown's privacy policy.
The home page embeds the SCD explainer video from youtube-nocookie.com, YouTube's privacy-enhanced mode. No cookies are set until you press play. If you do play the video, YouTube applies its own privacy policy.
The donation form on /donate is a Ko-fi iframe embedded from ko-fi.com. Ko-fi handles the entire payment flow on its own servers; your card details never touch this site. Ko-fi may set its own cookies inside that iframe and collects the information needed to process your donation under its privacy policy. We see only the donation amount and (if you choose to enter it) your name and message.
The contact form is a mailto: form: it opens your local email client with
a pre-filled draft. Nothing is sent to this server. The message goes straight from
your computer to contact@corruptionradar.org.
When you download the SCD bundle from /data, the form submission is processed by a small PHP endpoint on this server which: (a) increments an integer counter so we can show a public total of downloads via the site, and (b) appends a server-side log line with the timestamp, your IP address, your browser's user-agent string, and any values you typed into the optional "use case" and "email" fields.
The "use case" and "email" fields are optional - leave them blank if you would prefer not to share them. Logs are retained on the host server for security and operational purposes (debugging download issues, identifying abuse) and are not shared with third parties or used for marketing.
Newsletter subscriber emails are kept by Buttondown until you unsubscribe. SCD download logs are kept on the host server for as long as is operationally useful, typically a few months, after which old log lines are rotated out. Donation records are held by Ko-fi under their own retention rules.
If we hold any personal data of yours - which in practice means a newsletter subscription, a download log line, or an email you sent us - you can ask us to show, correct, or delete it. Write to contact@corruptionradar.org with the request and we will action it. EU residents can also lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.
If this notice changes substantively, the change will be reflected on this page. Material changes affecting how data is processed will be flagged at the top of the page for at least a month after the change.