Data minimization and publication privacy
Privacy notice
This notice explains what the complaint form collects, how the information is used, and what may become public.
Information collected
The complaint form collects a full name, email address, public-name preference, relationship to the matter, optional state or country, approximate time period, selected companies or people, complaint title, complaint text, required adult, truth, firsthand, privacy, publication-consent, and responsibility attestations, timestamps, a keyed one-way hash of the connecting IP address, and a keyed one-way hash of the browser user-agent string. The site does not ask for a birth date, Social Security number, financial-account number, policy number, password, medical record, or copy of identification.
Why the information is used
The information is used to verify the submitter's email, prevent abuse, send the private submission to the site administrator, conduct moderation, contact the submitter, prepare an approved public version, respond to correction or removal requests, maintain an audit history, protect the site, and address legal or security issues.
What may be published
Only an approved public version may be published. The public version may include the selected display name, role, optional state or country, time period, selected companies or people, title, complaint text, publication date, and a publication note. The full private name is not published when the submitter selects an initial or asks that the name be withheld. The contact email, raw IP address, IP hash, user-agent hash, moderation token, and private moderation notes are not published.
Email verification and administrative links
On a correctly configured server, the site sends a confirmation link to the submitter and protected moderation links to contact@coloniallifecomplaint.com. If outgoing mail fails, a protected private queue copy is retained for the site administrator to diagnose and deliver securely. The moderation link is a bearer credential that can review, publish, edit, reject, or remove that complaint. It should not be forwarded or shared. Opening the link alone does not publish a complaint; a separate manual confirmation is required.
Cookies
The dynamic forms use a temporary first-party session cookie for security, including cross-site request-forgery protection and status messages. The site does not include advertising cookies, behavioral tracking, analytics pixels, or third-party social-media scripts in the supplied package.
Retention
Unverified submissions are scheduled for automatic deletion after approximately 30 days. Rejected submissions are scheduled for deletion after approximately 180 days. Approved private records and published complaints may be retained while the complaint remains published and for a reasonable period needed for corrections, disputes, security, legal compliance, or an audit history. Server backups may persist temporarily beyond ordinary deletion.
Security
The package uses protected private storage, access tokens, email verification, cross-site request-forgery protection, output escaping, rate limits, spam controls, limited data collection, security headers, and automated checks for certain sensitive-number patterns. No internet system can promise absolute security. The server operator remains responsible for HTTPS, access permissions, backups, PHP updates, mail security, and web-server rules.
No sale or commercial sharing
The supplied site does not sell complaint data or use it for targeted advertising. Information may be disclosed when reasonably necessary to operate the site, obtain legal advice, investigate abuse, protect rights or safety, comply with lawful process, or resolve a correction, removal, or legal request.
Requests and questions
A submitter may request correction or deletion before publication and may request correction or removal after publication by emailing contact@coloniallifecomplaint.com. A person or organization named in a complaint may also request review of a specific statement. Requests are evaluated individually and may require reasonable identity or authority verification.
Adults only
The form is intended for adults. Do not submit information about a minor or ask a minor to use the form.
Last revised August 7, 2026.