Privacy boundary

The invitation request asks for a name, surname, email and voluntary written answers for human invitation review. It does not use behavioral telemetry, geo, device, pointer, click or timing data, and it does not make automated or AI admission decisions. An IP-derived HMAC blind index may be used separately only for rate limiting when a trusted proxy supplies an IP address; it is not a screening field or admission criterion. The public site must not expose an applicant’s identity, answers, invitation state or another person’s membership status. This local build must not contain real personal data and does not claim anonymity from infrastructure providers or end-to-end encryption from the operator.

Notice version: pv-privacy-local-draft-2026-10-05