Step 1 — Terms, version 2026-07-31
Read the terms
What you are attesting to, and what is recorded about you.
# Terms for submitting a report
By submitting a file you confirm the following.
## What you are attesting
- **I attest that the file was not obtained in an unauthorised manner** — not
by scraping in breach of a site's terms, not by unauthorised access to a
system, and not by obtaining a document that has not been released.
- **I attest that the contents are accurate** to the best of my knowledge and
understanding.
- **I accept that this service takes no liability whatsoever** for the contents
of the upload or for the act of uploading it.
- **I will report problems without undue delay.** Should I discover that
anything about a file I have submitted is dishonest or inaccurate, I will
inform the service promptly.
- **I grant a licence to use the file.** To the extent I am able to grant it, I
give this service an irrevocable, worldwide, royalty-free licence to store,
process, publish, and make the file available as part of its collection of
reports. Where I do not hold those rights, I confirm I am not aware of
anything preventing the file being used in this way.
- **I am acting on my own behalf**, not on behalf of an employer, client, or
any other party.
## What we do with your personal data
To accept an upload we record, alongside the file:
- **your IP address** and the time of the upload,
- the browser user-agent string you sent,
- the filename and size of the file, and a hash of its contents,
- which version of these terms you accepted.
**Why.** We need this to investigate abuse of a public upload endpoint, and to
be able to show what a submitter agreed to at the time they submitted. This is
processed on the basis of our legitimate interest in operating the service
safely.
**How long.** These records are deleted automatically **90 days** after the
upload. The report itself is kept; the record of who submitted it is not.
**Your rights.** You may ask for the record of your upload to be deleted before
the 90 days elapse. Because there are no accounts, quote the receipt ID shown
to you after uploading — it is the only way we can find your submission. You
may also ask what is held about you, and complain to
[IMY](https://www.imy.se/), the Swedish data protection authority.
**Contact.** See the repository this service is published from for a current
contact address.
## What happens to your file
Submitted files are checked and reviewed before being added to the collection.
Files that do not pass are not published. Nothing you upload appears publicly
automatically.
I have read and accept these terms, including that my IP address
is recorded and kept for 90 days.