Privacy policy

This policy covers the LegalOnly register. The short version: most of what you type into the listing form is meant to be published, your email address and the technical details of your submission are not, and we do not sell anything to anybody.

What is published

These fields appear on your public listing and are visible to anyone, including search engines: business name, website, ZIP code and the state derived from it, trade category, the description you write, any logo you upload, the name and title of the person who signed, the date of signing, and the version and fingerprint of the statement they signed.

The signer’s name and title are personal information, and publishing them is the point of the register: a statement nobody stands behind by name is worth nothing. Do not sign if you do not want your name published.

What is collected but not published

• Your email address. Used to contact you about your listing — a question during review, or a notice that it was published or removed. It is never displayed, never sold, and not used for marketing.
• The IP address and browser user-agent recorded at signing. Kept as part of the signature record, so a disputed or fraudulent filing can be investigated. Not displayed publicly.
• A removal code. Only a hash of it is stored, so we cannot recover or resend the code itself.

Server logs and anti-abuse

The web server keeps standard access logs (IP address, time, requested page, user-agent) for security and troubleshooting, and the site records submission attempts by IP address to rate-limit flooding. Logs are retained for a limited period and then discarded.

The listing form is protected by hCaptcha, which processes device and interaction data to decide whether a submission is automated. That processing is governed by hCaptcha’s own privacy policy.

Cookies

The public site sets no analytics or advertising cookies and does not track you across other sites. A single session cookie is set only for administrators signing in to moderate listings. hCaptcha may set storage of its own when the challenge is shown.

Who we share with

We do not sell or rent personal information. We share it only with the service providers needed to run the site (hosting and the captcha provider), and where we are legally required to — for example, a valid court order. Published listing content is, by design, available to everyone.

Retention

Listing and signature records are kept while the listing is live. If a listing is withdrawn or removed, the record is retained rather than erased, so that a statement made publicly can still be accounted for afterwards. If you want your personal information deleted rather than retained, ask on the corrections and removals page and we will consider the request.

Your choices

• Withdraw your listing yourself at any time on the withdrawal page.
• Ask us to correct anything inaccurate about your listing.
• Ask what we hold about you, or ask for it to be deleted.

Depending on where you live, you may have additional rights over your personal information under state or national law. We apply the choices above to everyone rather than asking where you live.

Children

The site is for businesses and is not directed at children. We do not knowingly collect personal information from anyone under 16.

Security

Traffic is encrypted in transit. Removal codes and administrator sessions are stored as hashes rather than in the clear. No system is perfectly secure, and we make no guarantee that yours is the exception.

Changes

If this policy changes, the date at the top of the page changes with it. A change that materially affects what we publish will be announced on the site.

Contact

Privacy questions and requests go to the corrections and removals page.