Privacy and data
There is no sign-up and there are no accounts. This page explains what happens to your text when you submit a report, and what this site stores.
Hidden automatically before publishing
| Item | Original | Published as |
|---|---|---|
| IPv4 address | 203.0.113.45 | 203.0.*.* |
| IPv6 address | 2001:db8:4f2a::1 | 2001:db8:*:* |
| Hostname | root@web-01:~# | root@[hostname]:~# |
[email protected] | [email] | |
| Secrets and tokens | token=8f2c91d7e4 | token=[secret] |
- Hostnames are taken from the “Hostname” line and the shell prompt; the same name is also hidden wherever else it appears as a whole word.
- Secrets are the values of fields such as token, api_key, secret and password, and tokens starting with sk-, AKIA, ghp_ and similar.
- These stay as they are: hop addresses in route traces and the addresses of carrier test nodes (they belong to the carriers, not to your server); private addresses such as 10.x and 192.168.x.
Hiding happens in your browser, so what is sent is already the hidden text; the server applies the same rules again and stores only the result. Everything that matches is hidden; you can’t keep individual items.
Automatic detection can miss things, such as a domain or machine name in ordinary text. Before publishing, switch to “Preview” on the submit page: that is exactly what will be published.
What is stored
- Reports: the hidden raw output, title, script type, submission time and the numbers parsed from the output.
- Submitters’ IP addresses are not stored. To limit how often someone can submit or flag, the server counts requests per IP in memory only; the count is cleared within an hour and never written to the database.
- Flags: the reason and note are stored. To stop one person flagging a report twice, an identifier derived from the IP is stored too; it changes every day and can’t be turned back into the IP.
- The database is backed up nightly; backups are kept for 7 days.
Cookies and browser storage
- The vg-lang cookie is set only when you pick a language in the language menu. It lasts a year and makes links without a language open in that language.
- Your theme, the raw output wrap setting and the submit page draft are kept in your browser and never sent to the server.
After publishing
- All reports are public; anyone can view them and share the link.
- Reports can’t be edited or deleted after publishing: without accounts, this site can’t tell who submitted one.
- If a report contains your or someone else’s personal data, use “Flag” on the report page and choose “Contains personal information”. Once an admin hides it, it disappears from the list and search, and its page says it was removed.
- Hiding is not deleting: the report stays in the database and backups but is no longer public.
- This site is served through Cloudflare, so requests pass through Cloudflare’s network.
Report comments