Draft · October 25, 2026. The operator’s legal identity, privacy contact, applicable jurisdiction, retention periods, and handling of privacy requests must be confirmed before public launch.
Browsing the resource library
Public resources can be read and downloaded without an account. This website does not add a marketing analytics or advertising tracker. Hosting providers may process technical request information as part of delivering and protecting the site.
When you contact us
The form collects your name, email address, inquiry topic, message, and optional organization name. These details are used to receive and respond to your inquiry. Do not send private disclosures, personnel records, passwords, or other sensitive information through this form.
Delivery and abuse prevention
When live email is configured, the form sends your inquiry through Resend to the configured Purpose Framework inbox. Acceptance by the email provider is confirmed before the form reports success. In local development only, submissions are saved to a local test inbox and no email is sent.
The server keeps keyed email hashes and request counters in Firestore to limit repeated submissions. These counters do not contain the message or the raw email address. Counter windows last one hour; expired counters are replaced when that address submits again. This implementation does not yet automatically delete inactive counter records.
The policy management application
Member accounts, organization workspaces, policy documents, acknowledgments, and private disclosures belong to the separate authenticated application. This draft is not a complete privacy notice for that service. Access controls for the application continue to apply.
Details still to be finalized
- Identify the legal operator and a dedicated privacy contact.
- Document hosting locations, service-provider arrangements, and any applicable international transfers.
- Set retention and deletion procedures for inquiries, email, logs, test messages, and abuse-prevention counters.
- Confirm applicable privacy rights and how requests will be verified and handled.
For a general question about the website, use the contact page. A dedicated privacy request process still needs to be established.