Privacy Policy

Justice for One Justice for All is committed to radical data minimization. We collect only what is strictly necessary to operate our services. We do not sell, broker, or monetize your personal data. This policy applies to all users, subscribers, and visitors of this platform, and is intended to comply with applicable privacy laws including the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR) where applicable, and other relevant privacy frameworks.

Account holders and subscribers:

• Name and email address (required for account creation)
• Subscription and payment status (we do not store payment card numbers; payment processing is handled by PCI-compliant third-party processors)
• Content you voluntarily post on the Bulletin Board or Live Chat
• Account activity logs for security purposes (login timestamps, IP addresses associated with account actions)

All visitors:

• Standard server access logs (IP address, browser type, referring URL, pages visited, timestamps) retained for a maximum of 30 days for security and performance monitoring, then automatically deleted
• Session cookies necessary for authentication and site functionality (see Section 6)

• No account, email, name, or any identifying information is required or collected
• The IP address of the submitting device is never logged or stored in connection with a submission
• Submission content is encrypted with AES-256 before any database write operation — no plaintext is ever stored
• The only output is a randomly generated tracking ID with no mathematical or database relationship to your identity
• Even our own staff cannot identify who submitted a particular submission
• We cannot comply with demands to identify submitters because we genuinely do not possess that information

• To provide, maintain, and improve our services
• To authenticate your account and maintain your session
• To process subscription payments through our payment processor
• To communicate service updates, security notices, and material changes to these policies
• To detect and prevent fraud, abuse, and security threats
• For internal analytics to improve content and user experience (aggregated, non-identifiable data only)

We do not use your data for advertising targeting, behavioral profiling, or sale to data brokers.

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We may share data only in the following limited circumstances:

• Service providers: Payment processors and hosting infrastructure providers, bound by confidentiality agreements, who process data solely on our behalf
• Legal process: If compelled by a valid court order, subpoena, or other legal process — however, we will notify affected users to the extent permitted by law and will challenge overbroad or legally deficient demands
• Safety: Where disclosure is necessary to prevent imminent harm to a person

We will never voluntarily cooperate with requests to identify anonymous sources or whistleblowers. We will exhaust all available legal remedies to resist such demands.

We use only strictly necessary cookies:

• Authentication session cookies to keep you logged in
• CSRF protection tokens

We do not use advertising cookies, third-party tracking pixels, social media tracking, or behavioral analytics cookies. You may disable cookies in your browser settings; this will prevent you from remaining logged in.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to know: What personal data we hold about you
• Right to access: A copy of your personal data
• Right to deletion: Request deletion of your account and associated personal data
• Right to correction: Request correction of inaccurate personal data
• Right to portability: Receive your data in a portable format
• Right to opt out: We do not sell personal data, so no opt-out is required for data sales

To exercise these rights, contact us through the Bulletin Board. We will respond within 30 days. We will verify your identity before processing requests.

Account data is retained while your account is active and for a reasonable period thereafter for legal compliance purposes. Server access logs are deleted after 30 days. You may request deletion of your account at any time. Bulletin board and chat posts may be retained in anonymized form for archival and journalistic record purposes after account deletion.

This platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided personal information, we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated to registered users by email and posted on this page with an updated date. Continued use of the platform after changes constitutes acceptance of the revised policy.