Privacy Policy
How We Protect Your Identity
Our Commitment
Firewatch Reports is designed with your privacy as the top priority. We understand that reporting activity in your community can be sensitive, and we've built this system to ensure your anonymity is protected at every step.
What We Don't Collect
-
IP Addresses
We do not log or store your IP address. Our servers are configured to discard this information.
-
Cookies
We do not use cookies of any kind - no tracking cookies, no session cookies, nothing.
-
Browser Fingerprints
We do not collect browser type, screen size, installed fonts, or other fingerprinting data.
-
Location Data
We never request your location. Any location in photo metadata is stripped before processing.
-
Analytics
We do not use Google Analytics, Facebook Pixel, or any other tracking/analytics tools.
-
Third-Party Scripts
We load no external scripts. Everything runs from our servers only.
What Happens to Your Report
-
Submission
Your report is sent over an encrypted HTTPS connection.
-
Processing
The server processes your report in memory only - nothing is written to disk.
-
Media Handling
Any photos or videos have their metadata (EXIF data including GPS coordinates) stripped.
-
Delivery
Your report is encrypted and emailed to the receiving community organization.
-
No Storage
After sending, your report is deleted from server memory. We keep no copy.
Photo & Video Privacy
Modern cameras and phones embed hidden data in photos called EXIF metadata. This can include:
- GPS coordinates where the photo was taken
- Date and time
- Device model and serial number
- Camera settings
Our system automatically removes all this metadata from any photos or videos you upload, both in your browser before upload and on our server as a backup measure.
For Maximum Privacy
While our system protects your anonymity, you can take additional steps:
-
Use Tor Browser
Tor routes your connection through multiple servers, hiding your location from everyone including us.
-
Use Private/Incognito Mode
This prevents your browser from saving history of your visit.
-
Use a Public Computer
A library or internet cafe computer isn't linked to your identity.
-
Avoid Personal Details in Reports
Don't mention your name, address, or other identifying information in your report text.
-
Clear History After Submitting
Clear your browser history and close all tabs after submitting a report.
Technical Protections
We implement the following security measures:
- TLS Encryption - All connections are encrypted
- Security Headers - CSP, HSTS, and other protective headers
- No Database - Reports are processed and forwarded, never stored
- Minimal Logging - Server logs contain no request details
- Rate Limiting - Global rate limits that don't track individuals
Legal Requests
If we receive a legal request for user information, we will have nothing to provide. We do not collect identifying information, so we cannot be compelled to produce it.
Who Receives Reports?
Reports are sent to designated community organizations working on neighborhood safety. These organizations have agreed to handle reports responsibly and maintain reporter anonymity.