Policy version 2026-11-01.1
Comment Privacy Policy
Join once on this browser with a display name, email address, Community Guidelines acceptance and hCaptcha. We do not verify the email or send codes. We store only a protected, keyed digest of the address, not its readable text; it is never public and registration does not subscribe you to marketing.
A secure, HttpOnly, same-site cookie remembers your guest session for 30 days. Only a protected digest of the random session token is stored on the server. Display name, consent version, acceptance time and session expiry are stored privately. “Forget this browser” revokes the session and clears its cookie. Expired registration records are removed during later registrations. A new browser, expired session or cleared cookies requires registering again. There is no email-based recovery or cross-device identity.
Your display name, published comment or reply, article and date are public. Respectful comments publish automatically after safety checks; questionable content is held for review. We retain comments and their consent evidence until owner removal or a valid deletion request. Private registration and security data are not included in public comment responses.
We rate-limit each guest and also apply broader network limits using a salted digest, never storing a raw IP address. New guest blocks target that registered guest; legacy anonymous comment blocks can affect a shared network. Registering again cannot be guaranteed to identify the same person without stronger identity verification.
hCaptcha is required when joining, not for each comment, reply or report during a valid guest session. It may process browser and challenge data under its privacy policy. Reports and moderation controls are available only to authorized staff.
Contact Riça to request removal, consent withdrawal or appeal a moderation decision. Do not put contact information or private health details in public comments.