Privacy
In force from 6 August 2026.
Reading the site
Reading requires no account and sets no tracking cookies. Traffic is measured with Vercel's cookieless analytics: aggregate page counts, no identifiers that follow you, nothing sold or shared.
If you sign in
Sign-in is Google-only, handled by Supabase on infrastructure shared across Alkhalili Labs projects. We receive your email address and Google account id; we ask for nothing else from Google. On this site you choose a handle, and that handle - not your name or email - is what moderation and your account page show.
What the database then holds about you: your handle, your findings and their review status, your reactions (one per finding, changeable), and any files you attach to a submission. Public finding cards carry none of it - no bylines, no dates, no account link.
Where it lives, who processes it
The database runs on Supabase in the EU (Ireland). The site is served by Vercel. Media pages are built from Wikidata and Wikimedia, but those requests happen from our servers - your visit sends nothing to them. No advertising networks, no data brokers, no third-party trackers.
Deletion, and what survives it
You can withdraw pending submissions yourself. If you delete your account, your email, handle, and reactions go with it. Accepted findings persist - their copyright transferred to the project when they were accepted, as the terms state - and the author record is pseudonymised, so the text remains with nothing pointing back at you.
For access, correction, or deletion requests, or anything this page does not answer: corrections@realbadmedia.com.