What is stored, and who can read it.
The privacy model of Perspective Exchange, in the order a participant meets it.
Before the reveal.
The server sends each participant only the context and their own take, on every request. Other takes are not in the response at all.
Participants by link.
Need no account. Their browser keeps a private code; other participants see only its last six characters. If they type their name into a take, that is their choice.
The person who opens the exchange, and anyone who signs in.
Shown by username once the exchange opens. Opening an exchange needs an account: a username and a password, an email only if you want password recovery.
After the reveal.
Every participant sees every take, its dates and its edit note. The exchange stays readable to its participants indefinitely and can be downloaded as JSON.
Server logs.
IP addresses are logged at signup, login and logout for security auditing. Application logs exist for troubleshooting. Nothing is used for profiling or advertising, and the app loads no analytics or third-party script.
Deleting.
Deleting your account replaces your username and email with "Deleted user" and clears your password. Exchanges you opened and takes you wrote stay where they are.
Controller.
Arasaka di Hvozdikov Yevheniy, Busto Arsizio (VA), Italy, VAT IT03929200123. Requests about personal data: security@thepra.dev.