PRIVACY / NO HIDDEN TERM
ROOM Ø does not request your name, CV, profile, or public-entry email. Pseudonymous is not guaranteed anonymous: your writing may identify you, and essential session and abuse-prevention systems process technical request data.
ROOM Ø is operated by The Observer. The verified public support channel is not available, so public admission remains paused. Never send your private Mark or Room answers.
The application stores a pseudonymous Record ID; cohort and admission state; structured and written responses; drafts and revisions; server timing and technical status; locale, timezone, display and timing settings; consent and control events; reviewer accounts; reports; and, only for a controlled Record when deliberately added, a verified Signal.
For abuse prevention, ROOM Ø transforms the trusted network address into a keyed one-way digest. The application database does not retain the raw address. The hosting provider may process ordinary request metadata under its own infrastructure terms.
The essential participant session lasts up to seven days; an unconfirmed server session lasts thirty minutes. The raw Mark can remain in the current tab for up to thirty minutes during interrupted confirmation. Unsynchronized browser drafts are ignored after twenty-four hours and removed when ROOM Ø next runs on that device. Display preference remains until changed or browser storage is cleared.
Public raw Records are available only to the authorized ROOM Ø owner-reviewer. Controlled raw Records are available only to the authorized ROOM Ø owner and reviewers assigned to that cohort. A commissioning organization receives only its restricted published Dossier—never raw answers, drafts, timing, the Mark, or a Signal unless you later accept a named Approach. The exact live-retention date, export, withdrawal, session revocation, and live erasure controls appear in Record Control.
Support correspondence remains outside the assessment Record. No support-retention period is configured, so public admission remains paused. Browser-only or already disclosed external copies cannot be removed remotely.
The deployed D1 Time Travel window is not configured, so no new Record may be created and public admission remains paused.