Privacy Policy & Data Protections
How we protect reporter identity and handle public commercial driver safety data.
1. No Persistent Reporter Accounts
SafeSide does not require persistent user registration, passwords, or personal information to search or submit reports. Identity verification uses Cloudflare Turnstile — a privacy-preserving human verification system that never collects phone numbers, emails, or browsing data.
2. Encrypted Hashing of Reporter Identifiers
Raw phone numbers and email addresses are never written to database reports, public API responses, or system log files. Contact details are converted to a salted PBKDF2 hash (reporterHash) used exclusively for backend duplicate detection.
3. Server-Side EXIF Metadata Removal
All evidence images uploaded during report submission pass through server-side image processing (sharp) to strip GPS location coordinates, camera device info, and timestamp EXIF tags prior to storage.
4. Anonymous Session Tokens
Report submission tokens are short-lived (30 minutes) and contain no personal information. Each token is cryptographically bound to a unique anonymous identifier for duplicate detection.