Privacy

Signing as a witness is the only thing on this site that writes anything down.

What is stored

Your email address

So that the one notice can be sent, and so that nobody signs twice.

A handle, if you give one

Up to 24 characters. It is shown nowhere on this site.

The time you signed, and the time you confirmed

So the count is a count of confirmed people.

Your witness number

Assigned when you confirm. It never changes.

A salted, one way hash of your IP address

It stops one machine signing a thousand times. The address itself is never written down and cannot be read back out of the hash. The hash is dropped ten minutes later.

Why

To tell you when the first restoration begins. That is one email. There is no second list, no schedule of other mail, and nothing else is sent.

What is not done

Nothing is sold, rented, or handed to anyone for advertising. There is no analytics, no tracking pixel, and no cookie set by this site. Reading these pages writes nothing down. Your address is never shown publicly, and neither is your handle.

Who else handles it

This site and the door both run on one rented server at DigitalOcean, and the rows are kept on it. Cloudflare provides the bot check on the form. That check runs in your browser, so Cloudflare sees your address there; this site does not hand your address to it. Resend sends the mail. All three are processors: they hold this data to do those jobs and for nothing else.

Deletion

Every mail from this site carries a link that deletes the whole row: the address, the handle, the times, and the number. Following it shows one button and waits, so that a link scanner cannot delete your row by opening the mail. Mail programs that show an unsubscribe control of their own use the same link. The count of witnesses drops by one. Numbers already given to other people do not move, because they are never handed out twice.

An address that is never confirmed is deleted within thirty days, unasked. If a link will not work, write to hello@murel.net from the address you signed with and it will be deleted by hand.

This page was last changed on August 31, 2026. The controller is the company named in the colophon.