Policy
HypoRank collects only the information needed to secure participation and operate an evidence-review workflow.
Google sign-in creates a server-side account record with the verified account identifier, email, display name, optional avatar, role, and essential session metadata. Source and correction forms retain the submitted public URLs and editorial description.
OAuth tokens, session tokens, private evidence objects, internal editorial notes, submitted private contact details, and raw security reports are not exposed on public pages, sitemaps, feeds, or share cards.
Operational records are minimized and access-controlled. Legally necessary editorial, audit, and correction history may be retained in de-identified form when an account is removed.
Before public collection begins, an authorized privacy owner must set the jurisdiction-specific retention periods, rights contact, legal basis, and effective date.