Skip to content

Legal

Privacy.

Draft for review. This page describes how the software behaves; it is not yet a reviewed legal policy.

What we keep

  • Your email address (to sign you in), the name and profile details you choose to add, and the records you create.
  • Files you attach as evidence, in private cloud storage. Photos are re-saved on upload and videos are rewritten, which removes hidden metadata such as GPS coordinates.
  • Standard web-server access logs (IP address, page requested -- never the query string -- time, browser and referring site), used for security and troubleshooting. These logs feed our security monitoring, which automatically reports addresses that attack the site.
  • An append-only log of important changes (records created, evidence added or removed, visibility changes), which keeps identifiers and fingerprints rather than your content.

Location

I STOOD never shows your live location. If you check in at an event, your coordinates are compared to the event once and then discarded. What is stored is only that a check-in passed, when, and a coarse distance band.

If you ask the home page for events near you, your browser asks your permission first. Your location is rounded to about a kilometer before it leaves your device, used to look up nearby events, and not stored or logged. You don’t need an account for it, and it isn’t tied to one.

Who sees what

  • Each record is Public, Followers, or Only you. You choose a default and can change any record.
  • You can hide which event, the location, or the exact date of any record, hide whole categories, or make your profile private.
  • Files you attach are visible only to you, unless you choose to share a photo or video on a record. Others see that an artifact exists, never the file.
  • Shared photos and videos are visible to the people who can see that record. Before they appear, they get a safety check: when enabled, the image (or frames sampled from the video) is sent to Google Cloud Vision for an automated content check; otherwise a person reviews it. Files you don’t share are never sent anywhere.
  • If you choose to link your account to MIR (from Settings), I STOOD shares an anonymous account reference with MIR -- never your email or name -- and tells MIR only that certain things happened, and when: your account was created, your email was confirmed, an organization confirmed your attendance, or you checked in live at an event. Never what you attended, never anything you only declared yourself, and never anything about voting. If a moderator suspends an account or confirms a policy violation, that is recorded with MIR as a claim. Nothing is sent unless you link. Linking is optional and you can unlink at MIR anytime.
  • Saying you’re going to an upcoming event is a plan, not a record. It follows your default visibility (election events are always only you), others see it on your profile and the event page only if that allows it, and the event page’s “going” number counts public plans only. It’s never part of your history, never sent to MIR, and it’s removed when you record that you were there or say you didn’t go.
  • Tickets, receipts, emails and passes can’t be shared -- they carry barcodes, names and order numbers.
  • An organization that confirms your attendance can never make that record public for you. New confirmed records start private.

Your rights

Download everything from Settings as JSON or CSV. Delete any record, or your whole account, from Settings. Deleting removes the content and attached files.

Help chat

The chat button in the corner is Curio, an AI assistant that answers questions about how I STOOD works, from this site’s own pages. It’s a separate service run by I STOOD’s founder, loaded from getcurio.chat -- the only script on this site that comes from another domain.

  • Showing the button means your browser fetches it from getcurio.chat on each page, so -- like any website -- Curio’s server sees your IP address and browser type. It isn’t told which page you’re on.
  • What you type in the chat is sent to Curio to be answered by an AI. Nothing you type goes anywhere unless you use the chat.
  • The conversation is kept in your browser so it survives moving between pages.
  • Conversations are shared with us so we can fix what confused you -- the chat says so when you open it. It may ask your first name. Personal details you type are redacted first, except your first name, email or phone. Don’t type anything you wouldn’t want us to read -- and never your sign-in link.
  • Curio isn’t connected to your account or your records. It answers from the public pages of this site.

Advertising

On screens 480 pixels or wider (most tablets and computers, and phones turned sideways), some pages show a column of sponsored tiles from Pixboard. It is served entirely from istood.org -- your browser never loads anything from Pixboard while you read -- and it never appears on sign-in, settings or other account pages.

  • It sets no cookies and uses no browser storage, so it can’t follow you between visits or sites.
  • Our server fetches the ads and sends Pixboard only our site’s identity and running counts of how often each ad was shown or viewed -- never your IP address, browser details, the page you’re on, or anything about your account or history.
  • If you report an ad as a scam, Pixboard receives the ad, the reason, and a one-way scrambled token made from a shortened version of your IP address (used only to stop duplicate reports; it can’t be turned back into your address).
  • If you click an ad, your browser goes through Pixboard’s link on pixboard.ad and then to the advertiser. Pixboard records that click -- including your IP address and browser type -- to bill the advertiser and filter out bots, and keeps it for up to a year. This is the only time Pixboard receives anything about you individually, and it only happens if you click. Pixboard doesn’t tell the advertiser you came from I STOOD, but like any website the advertiser sees your visit once you arrive.
  • What Pixboard keeps otherwise: running totals of how often each ad was shown (not individual views), and scam reports until they’re reviewed.
  • The “P” under the column explains this in place.

What we don’t do

No tracking cookies. No sale of personal data. No profiling you for ads. No scores or rankings of people.