Privacy

Your private work stays temporary.

Last updated: October 10, 2026

This website is designed to collect as little personal information as reasonably possible. It does not require a public user account. That said, no public website can promise perfect anonymity, and your hosting provider, network provider, browser, external websites, or an AI provider may process technical information outside this website’s direct control.

Anonymous community posts

Public forum submissions are the explicit exception: they are retained for moderation and become public only after review. The main Forum tab also includes a clearly labeled temporary local demonstration; it does not publish to other people. Use “Open the public, moderated forum” to make an intentional public submission. We assign a random anonymous alias rather than accepting a real display name. Do not submit names, addresses, emails, phone numbers, Social Security numbers, account numbers, payment-card numbers, court case numbers, children’s identities, medical details that identify a person, or confidential documents.

The public-post endpoint rejects common contact, address, birth-date, account, payment and case/inmate identifiers. A hashtag cannot bypass that check. Do not rely on the check to detect real names or identifying narratives. Automatic redaction is imperfect. A moderator should review posts, but moderation also cannot guarantee that every identifying fact will be caught.

The website does not store a raw IP address inside the community-post record. For rate limiting and duplicate-report control, it creates a one-way HMAC fingerprint from the connection address and browser user agent. The fingerprint rotates monthly. The hosting server may separately retain ordinary access logs, which can include IP addresses and request details.

Resource database searches

Resource searches are processed against the website’s SQL knowledge database or its generated read-only fallback. The application does not save search terms or query fingerprints, and searches are no longer added to the page address by the resource-search interface. A hosting provider, database server, security service, or access log may still record request metadata. Resource entries are public-source research and do not contain community-post or document-generator submissions.

Temporary Research and Legal Workbench sessions

Research collections, notes, Workbench documents, facts, timelines, form answers and drafts are held in the open page's memory. They are not automatically saved in localStorage, sessionStorage, IndexedDB or a server collection database. Reloading, navigating away or closing the page discards the active workspace. Use an explicit download to keep anything.

Clear session now clears open Navigator sessions on the same origin. A 15-minute inactivity timeout also clears them; if the browser suspends a tab, the timeout is checked when it resumes. Browser back/forward restoration starts a fresh session. This is application-level clearing, not a guarantee of forensic erasure from the browser, operating system or device.

Research requests send collection content to this server for temporary in-memory processing. The server returns encrypted session state held only in page memory and does not write collection content or analysis caches to disk. Gemini Flash-Lite is used automatically where supported, with built-in guidance as the fallback. Research sends the question and canonical public source records; it excludes private notes, collection context, relationships and uploaded excerpts. Source chat sends the current question and public source records. Chat content audit recording is disabled. CSRF cookies and rate-limit metadata may still be used; hosting access/security logs are outside the application's session-clearing control.

The old private research database is cleared when the updated research API first runs. Legacy Navigator browser storage and encrypted PDF browser checkpoints are removed when the privacy runtime loads. Operator backups, previous deployment copies, exports and host logs require separate operator cleanup; this feature does not erase them.

Exports and original forms

PDF form browser autosave and resume are disabled. Explicit PDF, Word, JSON, text and encrypted backup downloads remain available. Downloaded files remain on your device after clearing a session. Workbench and Research handoffs open a new tab with a one-time in-memory transfer, not a persisted browser record. Each open page has its own temporary work; clearing sessions clears all participating tabs.

Navigator, Case Workspace, Oregon Legal Forge and Jellyfish AI

Case records, uploads, form answers, drafts, conversations, notes, evidence and free-text AI settings stay in the open page’s memory. They are not automatically saved in browser storage or a server database. Refreshing, leaving or closing the page discards them. End Session clears participating tabs and removes embedded workspaces. Download anything you want to keep before the session clears.

The main Navigator has a 30-minute inactivity timeout, a two-minute warning and a four-hour limit unless you explicitly continue. Dedicated Research, Workbench and other standalone pages clear after 15 minutes without activity. Suspended pages check expiration when they resume; expired activity cannot revive the old session. Display preferences such as theme and accessibility may persist, but private work does not.

Old browser workspace records and encrypted form checkpoints are removed on startup. Earlier server search/AI/explainer audits, feedback and report/contact queues are cleared by a restricted migration. New search and explanation audit recording is disabled. Report/contact submissions are disabled rather than retaining private free text. Public forum moderation and short-lived abuse-prevention records are separate.

Built-in guidance uses the site’s lookup services without sending form answers or document contents to an external AI. When you submit a resource question, intake description, pasted notice, passage or generated draft, the corresponding assistance tool may send that text to Google Gemini Flash-Lite through this website’s server automatically. There is no provider-selection prompt. Google may use free-tier content to improve its products. Built-in results remain available when the provider fails or a usage limit is reached. Automatic redaction handles common identifiers but does not reliably remove names or confidential facts; remove these before sharing. Google processes this text under its own policies. Uploaded files, evidence, contacts, full case records and deadline calculations are not sent to Gemini. Hosted research searches and external resource/video links also reach their respective providers. This website cannot clear another provider’s logs or retention.

Screeners, deadline estimates, and court routing

The benefits screener, legal-issue classifier, deadline estimator, court finder, complaint navigator, and appeal navigator process answers in the browser or through the site’s structured navigation database. The application does not intentionally create a user profile from those answers. The server and hosting provider may still log ordinary request metadata when a server API is used.

Donations and external links

Donation payments are handled by the external donation service selected by the site owner. This website should not collect payment-card information directly. Every external court, agency, nonprofit, payment provider, and resource site has its own privacy practices.

Cookies

The website uses a session cookie for security features such as CSRF protection and administrator authentication. Research collection state stays in page memory; legacy research access cookies are expired. Security-only sessions may hold CSRF tokens, administrator authentication or hosted-service access tokens, never private workspace content. These technical records do not constitute a saved case or chat session.

Website analytics

Public pages use Google Analytics (measurement ID G-VE50R53RX3) to understand visits and website usage. Google may receive technical information such as device, browser and connection details and may set analytics cookies. Advertising personalization and Google signals are disabled in the site's tag configuration. The initial page address sent by this integration excludes query parameters and fragments, uses a fixed site title and omits the referring address. This integration does not add tracking of chat text, form answers, uploaded documents or case workspace contents. Embedded tools and administrator pages do not initialize a separate tag. Analytics records are separate from your temporary workspace and are not erased by End Session. Browser privacy tools may block Analytics without preventing the site's assistance tools from working. See Google's privacy policy for its processing practices.

Deletion and corrections

A moderator can hide or permanently delete community posts through the private moderation page. Public posts also include a report button for privacy and safety concerns. Because no public account is attached to a post, the website may not be able to verify that a person requesting removal authored it.

Children

This website is not designed to collect personal information from children. Do not identify a child in a community post or AI question. Use official Oregon reporting resources for safety concerns; call 911 for immediate danger.

Security limits

The website includes security headers, CSRF protection, server-side secrets, moderation, rate limits, output escaping, and restricted storage directories. These reduce risk but do not make the system invulnerable. Keep PHP and the hosting environment updated, use HTTPS, back up carefully, and review server logs and permissions.