Say what you scan.

The address first. Then a few questions about what actually arrives at your door — every one about the past, every one skippable.

Access is provisioned from this list. We use your address to tell you when yours is ready and to follow up about it; you can tell us to stop at any time. We don’t sell it or hand it to advertisers. If we stop working on this, we say so rather than go quiet.

The list stores what you type here — address, answers, timestamps — plus a token we mint for that row so nobody who merely knows your address can open it. We use your address to follow up about this; we don’t sell it or hand it to advertisers. Separately, this origin does record the request itself — the referring page, the user agent, the address and the network it came from, and whether we judge the caller a person, an agent or a crawler. That is its own store, and the address is taken out of it after 30 days — while the estate’s append-only event ledger is never rewritten: what we log, in full.