Privacy Policy
http://hn2paw7w627n5bro3zirrhb5bchugcjmm2mvxggnnlxqjkhhwzolbdid.onionWethenorth Mirror Links operates as an independent informational resource, maintaining strict data-collection practices in accordance with applicable privacy regulations (including, but not limited to, GDPR Article 5 and CCPA §1798.100). This document outlines the minimal data retained by the service, retention periods, and user rights regarding personal information.
1. Scope and Affiliation
Wethenorth Mirror Links functions as a community-maintained verification directory for WeTheNorth Market onion addresses (hereafter referred to as "the Market"). This service is not affiliated with, endorsed by, or operated by the Market's administrators (hereafter referred to as "the Market Operators"). References to the Market's name, trademarks, or service marks are made under the doctrine of nominative fair use (17 U.S.C. §107) for the purpose of identification and commentary.
2. Data Collected
2.1 Server Access Logs
The service automatically records standard HTTP access logs containing the following fields: IP address (anonymized via truncation to /24 for IPv4 and /48 for IPv6), user-agent string, referrer URL, requested resource, timestamp, and response status code. These logs are retained for a period not exceeding thirty (30) days, after which they are permanently deleted from all storage media (including backups, pursuant to GDPR Article 17).
2.2 User-Submitted Content
Any comments, feedback, or verification requests submitted through the service's public interfaces (including the
tool) are stored indefinitely until manually removed by the submitter. Such submissions may include: the submitted .onion address, the associated PGP signature (if provided), and a timestamp. No personally identifiable information is required for verification requests, though users may optionally provide an email address for follow-up notifications (which is stored separately and encrypted at rest).3. Data Retention and Deletion
The service maintains the following retention policies:
- Server access logs: 30 days (automated deletion via cron job)
- User-submitted verification requests: Indefinite (manual deletion upon request)
- Search queries: Not stored (transmitted via HTTPS GET requests, not logged)
- Session cookies: Session duration only (no persistent cookies)
Requests for data deletion may be submitted via email to [email protected] or through the PGP-encrypted contact form available at /contact. Such requests will be processed within fourteen (14) business days, with confirmation provided to the requester (if contact information was provided).
4. Data Sharing and Third-Party Access
Wethenorth Mirror Links does not share, sell, or otherwise disclose any collected data to third parties, including law enforcement agencies, without a valid court entry (pursuant to 18 U.S.C. §2703). In the event of such a request, the service will notify affected users (if legally permissible) and provide the minimal responsive data required by law.
The service does not employ third-party analytics scripts, advertising networks, or tracking pixels. All external resources (including fonts and static assets) are served from the service's own infrastructure or from privacy-respecting providers that do not engage in cross-site tracking. The service's hosting provider may have access to server logs for maintenance purposes, but such access is governed by strict confidentiality agreements.
5. Cookies and Tracking Technologies
The service employs a single session cookie (named "session_id") for the purpose of maintaining user session state during navigation. This cookie does not contain personally identifiable information, does not track users across sites, and is automatically deleted when the browser session ends. No persistent cookies, local storage, or other tracking technologies are employed.
Users may disable cookies through their browser settings without affecting the core functionality of the service (though some features, such as the verification tool, may require JavaScript to be enabled).
6. User Rights Under GDPR and CCPA
6.1 Access and Rectification
Under GDPR Article 15 and CCPA §1798.100, users have the right to request access to any personal data held by the service, as well as the right to request correction of inaccurate data. Such requests may be submitted via the contact methods listed in Section 3.
6.2 Data Portability
Users may request a copy of their submitted data in a structured, commonly used, and machine-readable format (pursuant to GDPR Article 20). Such requests will be fulfilled within fourteen (14) business days, with the data provided in JSON format via encrypted email (if an email address was provided).
7. Third-Party Content and Trademarks
References to WeTheNorth Market, its vendors, or its services are made for informational purposes only and do not constitute an endorsement. The Market's name and any associated trademarks are the property of their respective owners (hereafter referred to as "the Market Operators"). Disputes regarding trademark usage may be directed to the service's legal contact at [email protected], and will be resolved in accordance with WIPO domain dispute procedures (UDRP).
The service may link to external resources (including, but not limited to, Ahmia's blacklist and Mailvelope's key directory) for the purpose of providing additional context or verification tools. Such links are provided for informational purposes only and do not imply affiliation or endorsement.
8. Changes to This Policy
This Privacy Policy may be updated from time to time to reflect changes in legal requirements or the service's data practices. Material changes will be announced via a notice on the service's homepage and will take effect fourteen (14) days after publication. Users are encouraged to review this policy periodically for updates. Continued use of the service after the effective date of any changes constitutes acceptance of those changes.