Personal data

Inventory of the processing: hashes of commit authors from the reference repositories, hashes of the contribution proofs, author contact addresses, accounts, media, review threads, moderation log. Commit addresses are never stored in the clear: only the hash in sha256 format.

The internal channel of the review threads often carries an opinion written by a person: it falls within the scope of an access request, subject to data concerning third parties.

Reporting a content requires an email address: the moderation team uses it to ask you for a detail, and for nothing else. It is never passed on to the author of the reported content.

On account deletion: publication data is kept in minimised form if content remains online; proof hashes are kept to prevent a circumventing re-registration, which rests on legitimate interest.

Access, rectification and erasure requests are handled by the moderation team under a written procedure. The exact retention periods are set before going live.