Privacy

Privacy by design, not as an afterthought.

EFF separates direct identifiers, public supporter profiles, private stories, research responses, contact information, operational Help Desk data, and published aggregate findings.

Core protections

Private information is not placed in URLs or analytics
Research contact information is stored separately from responses
Stories require review and separate publication approval
Small cells are suppressed before public reporting
Withdrawal, correction, and deletion requests require identity verification

Important limitation

A withdrawal can stop future use when applicable, but EFF cannot promise that previously published aggregate findings can always be removed retroactively.