Privacy Notice

Staging draft for review · Revision 2026-10-13.1 · Not yet effective

Scope

This draft describes the 2Bitwise website and invitation-only portal. Other products have separate notices. Current reports are synthetic: this release does not receive live MOH aggregates or access MOH's database, private notes, messages or user identities.

Public website

No registration form or contact form collects messages here. The contact link opens your email application; sending email is your choice and the resulting correspondence is handled by the mailbox provider. We have not added advertising trackers or an analytics SDK. Hosting and network providers may process IP addresses, request times and technical logs to deliver and secure the site.

Identity and necessary cookies

When private sign-in is configured, the hosted identity provider verifies your email and supplies an issuer and stable account identifier. We store membership email, role, active status and relevant timestamps in PostgreSQL to enforce access. We do not collect your provider password. Necessary HttpOnly cookies hold a short-lived login-state token and an opaque session token; server-side records hash those tokens. Login state expires after ten minutes and sessions after eight hours. These cookies are for authentication, not advertising.

Invitations and report email

The owner supplies an invited staff email. We retain an invitation token hash, creator, expiry and acceptance/cancellation timestamps; invitations expire after 24 hours. When email sharing is enabled, only the owner can send sample aggregate PDFs to active approved members. Delivery records retain sender/recipient member references, request/report identifiers, status and time for duplicate protection and reconciliation. PDF bodies are not stored in these database job records. A mail provider processes recipient addresses and attachments during delivery.

Providers and disclosures

Railway hosts the staging services and database. Google verifies portal identities. Resend is the selected transactional mail provider, using the existing verified MOH sender when configured. Proton remains an optional SMTP/mailbox provider. Mail integrations require configuration and verification before use. Only the data needed for the configured service is sent to its provider. SMTP mail is not end-to-end encrypted. We do not sell personal information or enable a public mail relay. Legal requirements and authorized security investigations may require limited disclosure.

Access, retention and requests

Portal members receive only data authorized for their role. The owner controls invitations and access; authorized infrastructure operators may need access for maintenance, security and recovery. Revocation blocks future private requests and existing sessions, but does not recall downloaded reports or mail already accepted for delivery. Expired login/session records are cleaned during login. Membership, invitation, delivery metadata, hosting logs, mailbox records and backups may remain after access removal; exact retention and provider/backup arrangements require operator review before production. This draft does not promise immediate deletion or a fixed retention period that is not implemented.

Your choices and notice changes

You can refrain from emailing, decline an invitation, sign out, or ask the owner to revoke access. Contact the public address below to request access, correction or deletion of your account information; we will review the request subject to applicable requirements and identity verification. This version has no self-service deletion endpoint. Material practice changes, live reporting, new providers or retention changes require an updated notice. Viewing this draft does not consent to optional analytics, email marketing or product usage sharing.

Questions: fed@2bitwise.one.