# Terms for submitting a report

By submitting a file you confirm the following.

## What you are attesting

- **I attest that the file was not obtained in an unauthorised manner** — not
  by scraping in breach of a site's terms, not by unauthorised access to a
  system, and not by obtaining a document that has not been released.
- **I attest that the contents are accurate** to the best of my knowledge and
  understanding.
- **I accept that this service takes no liability whatsoever** for the contents
  of the upload or for the act of uploading it.
- **I will report problems without undue delay.** Should I discover that
  anything about a file I have submitted is dishonest or inaccurate, I will
  inform the service promptly.
- **I grant a licence to use the file.** To the extent I am able to grant it, I
  give this service an irrevocable, worldwide, royalty-free licence to store,
  process, publish, and make the file available as part of its collection of
  reports. Where I do not hold those rights, I confirm I am not aware of
  anything preventing the file being used in this way.
- **I am acting on my own behalf**, not on behalf of an employer, client, or
  any other party.

## What we do with your personal data

To accept an upload we record, alongside the file:

- **your IP address** and the time of the upload,
- the browser user-agent string you sent,
- the filename and size of the file, and a hash of its contents,
- which version of these terms you accepted.

**Why.** We need this to investigate abuse of a public upload endpoint, and to
be able to show what a submitter agreed to at the time they submitted. This is
processed on the basis of our legitimate interest in operating the service
safely.

**How long.** These records are deleted automatically **90 days** after the
upload. The report itself is kept; the record of who submitted it is not.

**Your rights.** You may ask for the record of your upload to be deleted before
the 90 days elapse. Because there are no accounts, quote the receipt ID shown
to you after uploading — it is the only way we can find your submission. You
may also ask what is held about you, and complain to
[IMY](https://www.imy.se/), the Swedish data protection authority.

**Contact.** See the repository this service is published from for a current
contact address.

## What happens to your file

Submitted files are checked and reviewed before being added to the collection.
Files that do not pass are not published. Nothing you upload appears publicly
automatically.