Privacy

1. Overview

POSWatch is an accountability registry. Some of what it holds is public by design: the allegations against named subjects and their supporting evidence. Other data, above all the identity of the person who filed, is treated as sensitive and protected. This page explains the difference. Questions: [email protected].

2. Filer and declarant identity is sealed

When you file a sworn report, your name, email, and jurisdiction are encrypted at rest using AES-256-GCM. This declarant identity is not published, is not shown on the entry, and is not shared with the named subject. It is retained only to preserve the integrity of the record and to permit reveal under valid legal process. An anonymous tip carries no declarant identity at all. If you are the subject of a filing exercising right of reply, the contact details you provide for that purpose are handled the same way.

3. What is public

Once an entry is approved, the following is public: the subject's display name, role, tradition, organization, and jurisdiction as filed; the category, title, and factual summary of the allegation; the incident date and location; the primary-source evidence and its citations; any rebuttal; and the record's hashes and timestamp proofs. Do not put anything in a public field, especially the summary, evidence titles, or quotes, that you do not intend to be permanently public.

4. No tracking

POSWatch does not run third-party advertising or behavioral-tracking cookies, and does not sell data. We do not build advertising profiles of visitors. Standard server logs may be kept briefly for security and abuse prevention. Aggregate, non-identifying traffic and bot-detection signals may be collected to keep the registry available.

5. The record is permanent

Every filing, approval, rebuttal, and withdrawal is hash-chained, SHA-256-canonicalized, and OpenTimestamp-anchored. Because the ledger is append-only and tamper-evident, published records cannot be silently erased. A withdrawal is a counter-entry, not a deletion. This permanence is deliberate, and it limits what a data request can undo for content that is public by design.

6. Data requests

To request access to, or correction of, the personal data we hold about you, write to [email protected]. If you are named in an entry and dispute it, the primary remedies are the right of reply on the entry and a correction request to [email protected] (see About). We respond to verifiable requests, balanced against the public-interest and legal-integrity purpose of the registry.

7. Contact

[email protected]

OptiMystic Holdings Corp.
Quebec, Canada