Privacy
Anonymity is the whole design, not a setting. Here is precisely what that means — and where it stops.
No account, ever
There is no sign-up, no login, no email, no phone number. Nothing links a report to a person because no identity is ever created.
Your IP address is never stored
To stop one person flooding the site, submissions are counted against an HMAC of the IP using a rotating secret. The raw address is never written down, the hash cannot be reversed, and it is stored in a table that holds no reference to any report — so it cannot be used to work backwards from a report to a submitter. Rotating the secret discards the link entirely.
Photos are stripped before storage
Phone photos carry EXIF metadata: GPS coordinates of where the photo was taken, the camera's serial number, often the owner's name. Every uploaded image has that metadata removed and is renamed to a random string before it is stored. The original filename is discarded too.
Coordinates are blunted
Locations are rounded to about 11 metres before storage — enough to place a government office on a map, not enough to point at a doorway. If you skip the location prompt, only the district is recorded.
Your browser never touches the database
All reads and writes go through this server. The database never sees a visitor's IP, and no database credentials are ever sent to the browser.
No trackers
No analytics, no advertising, no third-party scripts, no cookies. Map tiles are fetched from OpenStreetMap, which is the one external request a page makes. Reverse geocoding is proxied through this server so your coordinates are never sent to a third party from your device.
Where anonymity stops
A report is public and permanent — we cannot edit or delete it on request, because we have no way to prove it was yours. Details in your own words can identify you even when the metadata cannot: a case number, a vehicle plate, an unusual date, or an incident only a few people witnessed. Write the account so that it could have come from anyone. And note that this site cannot protect you from someone who was physically present at the incident.