Privacy Policy
Conspiracy Wiki is an independent, community-maintained archive. It is not run by a company, it carries no advertising, and it has nothing to sell — which means it has no reason to build a picture of who you are. This page describes exactly what the site records, why, and what you can ask us to remove.
What we collect
If you read. Nothing that identifies you. The site keeps its own count of page views, and each recorded view consists of the page path, the page title, the hostname of the site that referred you, and a broad device category (for example “mobile”). No IP address, no account, no cookie, and no identifier of any kind is attached, so these counts cannot be traced back to a person or joined together into a session.
If you create an account. Your email address and password are held by our authentication provider; the password is stored only as a hash, and we never see it. If you sign in with Google, Google tells us your email address, your name, and a link to your profile picture — nothing else, and we never receive access to your Google account. Alongside that we store a display name, the number of edits you have made, your role, and the date you joined.
If you contribute. Edits, article revisions, discussion posts, votes, and quiz results are recorded and attributed to your display name. This is the point of a wiki: contribution history is public and permanent, and it is how other readers judge an article. Your watchlist is private to you.
If you leave a reader note without an account. We store the note, the display name you chose for it, and which passage it is attached to. To stop a single person flooding the site, we also record a one-way salted hash of your IP address and an opaque random token kept in a cookie. Reports of abusive notes work the same way.
What we never collect
- We never store your IP address. Where an address is needed to limit abuse, it is immediately converted to a salted HMAC-SHA256 hash and only the hash is written down. The hash cannot be reversed into an address, and without the secret salt it cannot be matched against one.
- No advertising networks, ad tracking, retargeting pixels, or cross-site trackers.
- No sale or sharing of personal information, in any sense, to anyone, for any purpose.
- No marketing email. Account email is used for sign-in, password resets, and nothing else.
- No profiling, scoring, or automated decisions about you.
Analytics
Besides our own page counts described above, the site uses Vercel Analytics, which reports aggregate traffic — pages, referrers, countries, device types. It sets no cookies and assigns no cross-site identifier.
Cookies and browser storage
- Session cookies are set only if you sign in, and only to keep you signed in. Sign out and they are cleared.
- A visitor token — an opaque random value with no meaning outside this site — is set if you post a reader note, so that rate limits and note ownership survive a page reload. It is not readable by scripts and identifies a browser, not a person.
- Your theme choice (light or dark) is kept in your browser’s local storage and is never sent to us.
None of these are advertising cookies, and none follow you to other sites.
Who else handles this data
Two service providers, both processing data in the United States on our behalf: Supabase (database, sign-in, and file storage) and Vercel (hosting and the analytics described above). They process this data to run the site and for no purpose of their own.
Content embedded from other sites
Some pages include material hosted elsewhere, and loading it means your browser contacts that provider directly, which necessarily reveals your IP address to them. Once contacted, those providers apply their own privacy policies, not this one.
- Video. A small number of articles embed a YouTube player that loads with the page. In the video library, players load only after you press play, and YouTube videos there are served through youtube-nocookie.com. Vimeo, Rumble, Odysee, and the Internet Archive are also used.
- Wikipedia previews. Hovering a Wikipedia link long enough to open its preview fetches the summary from Wikipedia at that moment. Not hovering fetches nothing.
How long it is kept
Contributions and article history are kept indefinitely, because the edit history is part of the archive. Account data is kept until you delete the account. Anonymous page-view records and the hashes used for rate limiting are retained only as long as they are useful for counting and abuse prevention.
Your choices
You can ask us for a copy of the account data we hold, correct it, or delete your account and its personal data. Reader notes can be deleted from the browser that posted them, or on request. Deleting an account removes your account and its personal data; edits already merged into an article remain part of that article’s history, since removing them would damage the record other contributors rely on, but they can be de-attributed on request.
Depending on where you live you may have additional rights — access, correction, deletion, portability, or objection under the GDPR, or the rights granted by California law. We apply the same answer to everyone regardless of where they ask from. To exercise any of this, or to ask a question about it, email us.
Children
The site is not directed to children under 13 and we do not knowingly collect their personal information. If you believe a child has provided us with personal information, contact us and we will remove it.
Changes
If this policy changes, the date at the top changes with it. Material changes to what we collect will be noted on the site rather than made quietly.
See also our Terms of Service, Disclaimer, and Content Policy.