Privacy

Public-site request measurement

CiteFacts records privacy-minimized request events to understand whether its public information is being discovered and used. A record can include route type, URL path without its query string, broad crawler class, requested format, referrer hostname, country, data-center location, HTTP method and status, content length, information family, requested hostname, and monetization experiment state.

It deliberately does not record IP addresses, cookies, query strings, full referrer paths, raw user-agent strings, or a stable visitor identifier. Internal verification requests and protected dashboard reads are excluded from demand evidence.

Bulletin builder

Audience filters, selected notices, and newsletter exports are assembled in your browser. Aggregate events record successful text copies, downloads, copied filtered-view links, and clicks to open a custom-work email draft. They do not include your selections, bulletin text, email address, or a visitor identifier. A click is not proof that an email was sent or a payment made. Email inquiry contents follow your mail provider and our contact-route handling, not the event endpoint.

Google Search Console

The private operator report uses read-only Google Search Console access for this site's verified domain property. Automation requests finalized aggregate clicks, impressions, click-through rate, average position, public-page performance, and sitemap status. It does not request or store raw search queries.

The OAuth grant is used only for this reporting and can be revoked from the Google Account's third-party access settings. OAuth credentials are stored in encrypted secret stores and are not published with site content.

Sources and outbound links

Published records are derived from named public sources and link to those authorities. Following an outbound link is governed by the destination site's privacy practices.

Official recall photographs

Recall pages can embed photographs directly from CPSC. When an image loads, your browser contacts CPSC, whose privacy practices apply to that request. Image elements use a no-referrer policy so CiteFacts does not send the page address with the image request. These are source photographs, not advertising or analytics pixels.