Legal

Last updated: January 2026

1. Our Commitment

Daadaar is built on the principle of privacy by default. We believe you should be able to expose injustice without sacrificing your anonymity. This Privacy Policy explains what information we collect, how we use it, and the steps we take to protect your identity.

2. Information We DO NOT Collect

Zero IP Logging: We explicitly do not log or store your IP address. Our infrastructure, including our Cloudflare integration, is configured to anonymize requests at the edge.

No Usage Tracking: We do not track your browsing history or personal behavior on the Platform beyond what is necessary for security (see Rate Limiting).

3. Information We Collect

a. Anonymous Sessions

When you visit Daadaar, a random Session ID is generated and stored locally on your device. This identifier is used solely for:

Rate limiting to prevent spam (e.g., limiting the number of reports you can submit in an hour).
Managing your "upvotes" and "downvotes" to prevent double-voting.

This Session ID is not linked to your real-world identity.

b. Optional Account Information

If you choose to create an account, we collect:

Username: A pseudonym you choose.
Password: Hashed and salted securely.
Email (Optional): Only if you wish to recover your account. We recommend using a secure, anonymous email provider.

c. Content You Submit

Any reports, images, or text you submit to the Platform are public. Please be mindful of any personally identifiable information (PII) included in your submissions. We strive to sanitize content, but you are responsible for what you share.

4. How We Use Information

Security: To protect the Platform from abuse, spam, and "sybil attacks" using Proof-of-Work (PoW) and rate limiting.
Platform Operation: To display reports, verify content via AI, and maintain the knowledge graph.

5. Cookies & Local Storage

We use local storage and session cookies strictly for necessary functions:

Maintaining your login state or anonymous session.
Storing your preferences (e.g., language, theme).
Completing Proof-of-Work challenges.

We do not use third-party tracking cookies for advertising.

6. Data Security

Encryption: All data is encrypted in transit (HTTPS/TLS) and at rest (stored encrypted in our databases and object storage).
Minimal Retention: We do not retain logs that could identify you. Rate limit keys expire automatically.

7. Third-Party Services

We use trusted third-party providers for infrastructure, including:

Cloudflare: For DDoS protection and content delivery.
Microsoft Azure: For hosting, storage, and serverless functions.
OpenAI: For verifying report content (only the report text is sent, not metadata).

These providers are vetted to ensure they align with our security and privacy standards.

8. Contact & Updates

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page.

If you have concerns about your privacy, please contact the administrators via the Platform's reporting channels.