Skip to content
ControlVerdict
Sign in
Legal

Privacy Policy

Last updated 26 July 2026. This describes how ControlVerdict handles information when you use the site.

Who we are

ControlVerdict (“we”, “us”) operates this website. For security and privacy questions, email security@controlverdict.com.

What we collect

  • Account data. Email address (for sign-in), a public handle and optional display name you choose, role and moderation status, and (for assessors) an administrator-held reference to a credential check — never shown publicly.
  • Content you submit. Examples, verdicts and justifications, discussion posts, reports, and related moderation notes. Content you publish is public by design.
  • Session and security data. Database-backed sessions, rate-limit counters (sign-in attempts from anonymous clients are keyed by an HMAC of the network address, not the raw address), and an append-only audit log of privileged actions.
  • Operational logs. Application and host logs needed to run and secure the service (for example errors and request metadata at the platform layer).

We do not load third-party analytics or advertising scripts. We do not sell personal information.

How we use it

  • To authenticate you (magic links or optional OAuth) and keep you signed in.
  • To show your public contributions under the handle you choose.
  • To moderate content, investigate reports, and respond to security incidents.
  • To operate, secure, and improve the service.

Sharing

We use infrastructure providers (hosting, database, and email delivery for magic links) as processors to run the service. Public content is visible to anyone who can reach the site. We may disclose information if required by law or to protect the safety of users or the integrity of the platform (for example, removing possible CUI).

Retention

Account and content records are kept while the service operates and your account exists, subject to moderation (soft-delete) and legal obligations. Soft-deleted content may be retained so discussions keep structure and mistakes can be undone. Session records end when you sign out or the session expires; bans and account closure revoke sessions immediately.

If you close your account in Settings, we mark the account deleted, revoke sessions and passkeys, and release your email and handle so you can register again. We may retain soft-deleted contributions and audit records as needed for moderation, security, and legal obligations. Closing is not an immediate hard purge of all historical rows.

Your choices

You can update your public profile in Settings, export a copy of your contributions, soft-delete your content, or close your account. For other privacy requests, email security@controlverdict.com.

Children

The service is intended for adults working with compliance frameworks. It is not directed at children under 16.

Changes

We may update this notice as the product changes. The “Last updated” date at the top will change when we do. Material changes will be called out on the site when practical.

Related: Terms of Use, Security, About.