How private reader review works.

What the forms collect

Messages, corrections, replies and incident accounts require an email address, a subject and a message. A public source URL is optional. The message is limited to 3,000 characters, the subject to 120 and the URL to 1,000. The private record also contains its receipt ID, creation time, review status, disclosed policy version and expiry date. Consent to these terms is required before submission.

Dispatch interest requires only an email address and privacy consent. It records interest in future briefings. No mailing service is currently configured: submitting this form does not send or schedule an email, and does not guarantee future delivery. A future mailing programme requires its own confirmed arrangements.

Do not send identity documents, passwords, private access links, addresses or unnecessary details identifying other people. Source links must be public http or https pages without embedded account credentials. The intake handler does not fetch submitted URLs or accept file uploads.

The application does not save reader form contents in browser storage. To limit abuse, it derives a shared quota hash from the connecting IP using a private key. It does not store the raw address in the report or attach that hash to an individual report. Hosting and security providers process request information under their own service settings.

Who reviews the private record

Unprotest’s editorial desk reviews the queue. Access is restricted to authenticated staff with assigned editorial or moderation roles; the reviewer’s account identifier is not public. An acknowledgement does not establish that a submitted allegation is true, that anyone acted unlawfully or that an investigation will be opened.

Staff examine the particular claim, original context, date, supporting evidence and relevant responses. A moderation decision remains private. Publishing is a separate editorial action with its own sources, limitations and correction history; raw reports and contact details are not automatically published. Review does not guarantee a personal reply or a response from an institution.

Reader review is available regardless of political opinion or support for a government. This desk is not an emergency service, an official voter application route or a real event-booking service. Use the linked official assistance routes for those needs.

Thirty days, deletion and recovery backups

New reader records become unavailable 30 days after creation. Reviewing or rejecting a submission does not restart that period. Once expired, their contents and associated private review notes leave staff reading views. Daily maintenance is scheduled to purge expired records and those notes within 24 hours of expiry. A failed run can delay database deletion and requires an operator retry; hidden expiry is not represented as completed deletion.

Production recovery snapshots have a separate 30-day retention schedule. A copy of a deleted record may therefore remain recoverable for up to 30 additional days. Restored data must pass expiry cleanup before staff access is reopened. A minimal deletion-event record may remain for accountability; it contains no submitted email, URL, message or private review note.

Keep the receipt reference. To request earlier removal, send a reader message with “Record removal” as the subject, quote the receipt and use the email associated with the original submission. Staff review that request before deleting the private record. No automatic deletion or personal follow-up is promised by that request. Removing a private report does not automatically remove an independently sourced public article.

These terms apply to new consented reader records. Older records collected under previous arrangements require separate reconciliation; they are not silently assigned a new retention term.

Other forms and service boundaries

The public-link and optional-note form has its own private link-review policy. Recruitment and booking screens state their own intake status and terms. A reader message is not a job application, reservation or promise of compensation.

If a request is interrupted, it may already have reached storage. The form confirms receipt only after receiving a persisted receipt reference. Keep your text before retrying; a missing confirmation is not proof that nothing was stored.