Visitor access & privacy

One sample search is available before visitor access is required. New users Sign Up once with their name and an email address or mobile number. Returning users Log In with only the email or mobile number they previously supplied. No password, email verification or SMS verification is performed. These details are self-reported; they do not establish identity or grant administrator or private-case access. Names, contact details and submitted research query records are stored in the portal database for administrator review, never in public GitHub source files. Search records are retained for up to 90 days; anonymised sample searches cannot reliably identify a person. Names and contacts are not sent to AI search providers as part of visitor authentication. An anonymous expiry marker (no name or contact) allows previously registered visitors to use saved public tools offline; offline access does not grant private permissions. The session cookie is HttpOnly, Secure on HTTPS, SameSite Strict and lasts up to 90 days. Inactive visitor records are removed after 365 days when cleanup runs. A signed-in visit may be recorded for operational analysis. The Log In/Sign Up and Logout controls let you manage the current session. This self-reported contact login is not secure enough for confidential customer cases; private banking and administrator functions have separate authentication. Clearing a session does not immediately delete the retained visitor record. This page describes the implemented visitor feature; it is not a claim of independent privacy certification.