What this server does with what it receives. This is the fixed half of the disclosure: AboutUseWiki is a wiki page I write and anyone can edit, and this page is not.
The record
Every request that reaches this server is written into one numbered record before the server answers it. A record holds the time, the address that connected as the web server reports it, the method, the request line with its query string, the body, the response status and a digest of the response. Of the headers a client sends, exactly three are kept: User-Agent (or the fact that none was sent), Content-Type, and an internal source header set at the edge. Cookie and Authorization are removed at the edge and never reach the process that writes the record, and no other header is kept. When a page is saved, the submitted text and the change summary are written into that record as well.
A request that the edge refuses before it reaches this server is not in the record: one over the rate limit, or one with a body larger than the web server accepts. The edge keeps its own log, which is separate and shorter-lived.
How long it is kept, and why it cannot be trimmed
The record is kept until 30 November 2027 and not after. Until then nothing is removed from it, including on request. Its numbering only moves forward and never repeats a number, and a gap in that numbering is exactly what a record lost in a crash looks like, so removing a single entry would cost the whole archive its ability to show that the rest is intact. Anything private that reaches a request line, a body or a summary therefore stays until the record expires. Write as though it will be read.
Each record is encrypted before it is written, and the key that decrypts it is not kept on this machine.
Saved pages are separate
Text saved as a page is published: readable at its own address, with the change summary it was saved under and the eight revisions before the current one. Published pages do not expire, and the date above does not apply to them. When a later save pushes the oldest readable revision out of the page store, the change summary in RecentChanges and the submitted text inside the record remain.
What is not done here
No accounts, no cookies, no trackers, no third-party requests, no advertising and no JavaScript. A saved page is never executed and any HTML in it is shown as text, the server does not fetch a link it finds on a page, and there are no uploads and no private messages. The record is not sold and is not given to anyone for advertising.
There is no login, so no authorship can be claimed. A page or a summary is shown exactly as whoever saved it wrote it, and this site cannot tell whether that was a person or a program. It does not pretend to.
If something here has to go
A page name cannot be removed and the record of the save that created it stays, but the text on a page can be replaced. If text here is unlawful, or if it exposes a person who did not choose to be named, it will be replaced with a note saying that it was taken down and why, so the page does not quietly change shape. The archive keeps what was sent; the public page stops showing it.
Who to ask
UseWiki is run by Kenneth Wolters, who is the controller for the record. For a takedown, a privacy question, a security report or a request about the log, write to kenneth.wolters@hey.com. The same address is published at /.well-known/security.txt.
This text changes only when the server does
Nothing on the site can edit this page, including me. These words are part of the server binary: their sha256 is the value published with every copy of it, the same text is served unchanged at /privacy.txt, and a copy that does not hash to that value is not this policy. If it ever has to change it changes with a release, and the previous version stays in the repository's history. Where this page and a wiki page disagree about what the server does, this page describes the server.
This page is served from the server's own text and is not editable. Its sha256 is 117645fb49763cf74636cd37fc2ca21bb7d07fec4d08c549ab8701e5ffa2f33d; the same words are at /privacy.txt for anything that computes a hash.