Owners Alliance · Abuse Registry · Records office
Privacy Policy
How the registry collects, uses, and protects your personal information.
Introduction
This Privacy Policy describes how abuse.wtf ("the Platform"), operated by Owner's Alliance, collects, uses, and protects your personal information when you use our services.
By using the Platform, you consent to the data practices described in this policy.
Information We Collect
2.1 Information from Discord OAuth
When you sign in using Discord, we receive the following information from Discord:
| Data | Purpose |
|---|---|
| Discord User ID | Account identification and linking |
| Username | Display name within the Platform |
| Avatar | Profile display |
| Email address | Account recovery and notifications (if enabled) |
2.2 Report Data
When you submit a report, we collect:
- Reported user identifiers (user IDs, usernames, platform-specific information)
- Report details (title, description, category, evidence files)
- Your user ID as the report submitter
- Timestamps of submission and any modifications
2.3 Technical Data
We automatically collect certain technical information:
- IP address (used for security, session management, and rate limiting)
- Browser user agent string
- Session identifiers and fingerprints
- API access logs (for API key holders)
How We Use Your Information
We use the collected information for the following purposes:
- Service Operation: To authenticate users, manage sessions, and provide Platform functionality
- Report Processing: To facilitate the report submission, review, and verification process
- Security: To prevent abuse, detect fraud, and protect the integrity of the Platform
- Communication: To send notifications about report status changes and system updates
- Platform Improvement: To understand usage patterns and improve the Platform
Data Sharing
4.1 Public Reports
Approved reports are made publicly accessible through the Platform and API. Public reports include the reported user's identifiers, report type, description, and evidence. The identity of the person who submitted the report is never publicly disclosed.
4.2 Internal Access
Report data is accessible to authorized staff members (officers, supervisors, and administrators) for the purpose of report verification and management.
4.3 Third Parties
We do not sell your personal information to third parties. We may share data with:
- Law enforcement agencies when required by law or to protect the safety of our users
- Service providers who assist in operating the Platform (hosting, infrastructure)
Data Retention
We retain your data as follows:
- Account data: Retained as long as your account remains active
- Session data: Automatically expires after 60 minutes of inactivity
- Report data: Retained indefinitely as part of the public abuse database for approved reports
- Rejected or deleted reports: Soft-deleted and retained for audit purposes
- Access logs: Retained for up to 12 months
Data Security
We implement appropriate security measures to protect your data, including:
- Encrypted session management with fingerprint verification
- API key authentication with IP binding and rate limiting
- Role-based access control for internal data
- Secure file storage for evidence uploads
While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate personal data
- Request deletion of your account (subject to data retention requirements for approved reports)
- Opt out of non-essential communications
To exercise these rights, please contact us through our Discord community.
Cookies and Local Storage
The Platform uses:
- Session cookies: Essential for authentication and maintaining your login state
- Local storage: Used to store your theme preference (light or dark mode)
We do not use third-party tracking cookies or analytics services.
Children's Privacy
The Platform is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated effective date. Your continued use of the Platform after changes are posted constitutes acceptance of the revised policy.
Contact
For any privacy-related questions or concerns, please reach out through our Discord community.