The short version
This site has no account system, no cookies, no analytics, no tracking pixels, no advertising, no third-party scripts, and no endpoint that accepts anything you type. There is nothing to opt out of, because nothing is collected. What follows is the long version, because a privacy page that only says “we respect your privacy” tells a reader nothing they can check.
What the page loads
Three files from this origin: the page itself, one stylesheet, and one script. No fonts, images, frames or scripts are fetched from any other host. The Content-Security-Policy served with every response restricts scripts, styles and connections to this origin, blocks framing entirely, and forbids form submission anywhere — so even a future mistake in the markup cannot quietly start sending data elsewhere. You can verify all of this in your browser’s network tab; that is the point of listing it.
What stays in your browser
Two things you can create are stored locally: the assessment you assign a record and whether you have saved it. Both live in local storage under the key platform-evidence-lab-v1, in your browser, on your device. They are never transmitted — there is no endpoint that would receive them. They persist until you use Reset local review, clear site data, or remove them yourself.
Filter and sort state is written into the address bar so a view can be linked and restored. That means a link you share carries whatever you had typed in the search box. It is visible to you before you send it, and it never reaches this site as anything other than an ordinary request.
If your browser refuses local storage — private windows and locked-down configurations often do — the register still works; your review notes simply last as long as the tab does.
Exports
The JSON export is assembled in your browser and saved by your browser. It contains the public evidence records and your own review state attached to each one. Nothing is uploaded; the file goes straight to your download folder. Because it merges public evidence with your private annotations, treat the exported file as an internal document rather than a citable source.
Links out
Opening a cited source sends an ordinary request to that third party, which will see it under its own privacy practices. This site sets a strict-origin-when-cross-origin referrer policy, so those hosts learn that you arrived from this origin but not which record you were reading.
What the host sees
The site is served by Vercel, which processes ordinary request metadata — IP address, user agent, requested path, timestamp — to deliver and secure the site under its own privacy practices. That happens for any hosted website and is outside this site’s control. Nothing beyond it is recorded here.
Use boundaries
Do not enter case narratives, account names, identifiers, or anything sensitive into the search box. Not because it would be transmitted — it would not — but because it is written into the address bar, which means it can end up in a shared link, a screenshot or a browser history you did not intend. The interface deliberately requests no free-text submissions of any kind.