Faragha

Kwa ufupi

Huduma huhifadhi jina la mtumiaji, hashi ya nenosiri na unachoandika katika mijadala. Anwani iliyothibitishwa inabadilishwa na hashi yenye ufunguo, isipokuwa ukiomba kupokea vikumbusho. Ndani ya mjadala hakuna unachoandika kinachoonyeshwa chini ya jina lako, na siku saba baada ya mjadala kukamilika unatiwa muhuri: kila jina ndani yake linabadilishwa na la nasibu, kwa hivyo hakuna anayeweza tena kusema nani aliandika nini. Hakuna vifuatiliaji, hakuna uchanganuzi wa matumizi wala matangazo, na hakuna kinachouzwa. Mijadala isiyokamilika hufutwa baada ya idadi maalum ya siku; iliyokamilika inabaki. Unaweza kuomba nakala ya data yako, marekebisho au kufutwa kwa akaunti yako. Seva ziko katika Umoja wa Ulaya.

Tafsiri kwa ajili ya marejeo yako. Maandishi ya Kiingereza yaliyo chini yake ndiyo yanayofunga kisheria.

Faragha

Ilisasishwa mara ya mwisho tarehe 1 Septemba 2026. Kinachohifadhiwa, kwa nini, na kwa muda gani — imeandikwa kutokana na msimbo, si kutokana na kiolezo.

Tunachohifadhi

Jina la mtumiaji na hashi ya nenosiri. Imetiwa chumvi na kuhashiwa; hatuwezi kusoma nenosiri lako.
Anwani ikiwa tu utaitoa, na hadi utakapoithibitisha tu. Ukishathibitisha, anwani inafutwa na mahali pake panawekwa hashi yenye ufunguo — inatosha kuhakikisha sanduku moja la barua, akaunti moja, na kutuma kiungo cha kuweka upya nenosiri; haitoshi kurejesha anwani. Kuna jambo moja la kipekee, kwa uchaguzi wako: ukiomba kwenye dashibodi yako kupokea vikumbusho kutoka kwa wasimamizi wa mijadala uliyomo, anwani hiyo inatunzwa kwa kusudi hilo moja tu — isiyozidi barua moja kwa kila awamu, inayotumwa na jukwaa kwa ombi la msimamizi, haionyeshwi kamwe kwa msimamizi — na inaondolewa mara tu unaposema hivyo, au pamoja na akaunti yako.
Unachoandika: kadi, ufafanuzi, zamu za mazungumzo ya pembeni, kura, viungo, mapendekezo. Ndani ya mjadala haya hayahusishwi nawe popote kwenye kiolesura. Wakati mjadala unaendelea, hifadhidata inarekodi nani aliandika nini, ili kura moja kwa kila mtu na zamu kwa mzunguko viweze kufanya kazi kabisa. Siku saba baada ya mjadala kukamilika unatiwa muhuri: kila jina ndani yake linabadilishwa kwa jina la nasibu na orodha ya mabadiliko hayo haiandikwi popote. Jina la msimamizi linabaki tu kama msimamizi wa chumba; kile msimamizi alichoandika au kupigia kura kinabadilishwa kama cha kila mtu mwingine. Kuanzia hapo hakuna kitu kwenye seva hii kinachoweza kusema nani aliandika kadi ipi, alipiga kura ipi, au alisema nini katika mazungumzo ya pembeni — si msimamizi, si mwendeshaji, si amri ya mahakama. Kumbukumbu yako mwenyewe inatunza mambo matatu: kwamba ulikuwa katika chumba hicho; sentensi uliyoandika kuhusu msimamo wako kabla na baadaye, pamoja na mahali vibandiko vyako vilipoishia kwenye ramani ya chumba; na takwimu zako mwenyewe kutoka humo, kama vile uliandika kadi ngapi, zilipata vibandiko vingapi, na kura yako ililingana na uamuzi wa chumba mara ngapi, kama hesabu zisizotaja kadi yoyote. Ni wewe tu unayeweza kuyasoma, isipokuwa ukishiriki jumla zako kwenye kiungo chako mwenyewe (kamwe si vyumba vyako wala kadi zako), ambacho unaweza kukikomesha wakati wowote; kufuta akaunti yako kunayafuta na kukomesha kiungo hicho. Chumba kinatunza jambo moja zaidi: msimbo wenye ufunguo kwa kila mtu aliyeketi ndani yake, kamwe si kwa chochote alichofanya, ili makundi mawili ya vyumba yanayoshiriki watu yasihesabiwe kuwa huru. Unatengenezwa kutokana na thamani ya nasibu kwenye akaunti yako, si kutokana na jina lako; akaunti yako ikishafutwa, haumwelekei mtu yeyote.
Mijadala uliyokuwemo. Orodha kwenye kumbukumbu yako ya namba za utambulisho za vyumba, kamwe si ya kadi. Ndiyo inayokuwezesha kupata chumba tena, kusoma chumba cha faragha ulichoshiriki baada ya kutiwa muhuri, na kunyimwa kiti cha pili katika kundi la vyumba ambalo tayari uliketi ndani yake.
Mijadala ya faragha. Chumba kilichofunguliwa kama cha faragha kinasomeka na wanachama wake na si na mtu mwingine yeyote, katika kila awamu na baada ya kuamuliwa — si na mwombaji, si na mtu mwenye kiungo. API, ukurasa na mlisho wa mabadiliko vyote vinakataa kwa njia ileile.
Kuki ya kikao iliyotiwa sahihi, inayokwisha muda baada ya siku 14. Hakuna kuki za wahusika wengine, hakuna takwimu za ufuatiliaji, hakuna matangazo, hakuna vifuatiliaji.
Orodha za wanachama wa mashirika: hashi zenye ufunguo za anwani ambazo msimamizi wa mfumo alitoa, pamoja na kidokezo cha herufi mbili ili aweze kutambua mstari. Anwani zenyewe hazihifadhiwi.

Tusichohifadhi

Hakuna mahali ulipo, hakuna namba ya simu, hakuna vitambulisho vya matangazo, hakuna wasifu uliojengwa kutokana na tabia yako, hakuna kumbukumbu za IP zaidi ya zile ambazo seva ya wavuti inatunza kwa muda mfupi. Hatumuuzii mtu yeyote chochote.

Nani mwingine anaona

Washiriki wengine wanaona ulichoandika, kamwe si kwamba wewe ndiye uliyekiandika.
Msimamizi anaona jina la mtumiaji la mtu anayeomba kujiunga, kwa sababu huo ni uamuzi kuhusu kama mtu fulani anastahili kuwemo.
Vyumba vingine vinaona kadi ikiwa tu uliiachilia.
Wachakataji: mtoa huduma wa barua pepe kwa uthibitisho na kuweka upya nenosiri; mtoa huduma wa malipo ukijisajili kulipia; mwenyeji wa seva. Ikiwa msaidizi wa hiari wa mantiki amewashwa, sentensi za hoja unazomtumia zinatumwa kwa Anthropic — bila maelezo ya akaunti, na uamuzi unakokotolewa kwenye seva hii kwa vyovyote vile.
Mwendeshaji anaweza kusoma hifadhidata. Kumbukumbu bado haziwezi kuonyesha zikichezewa, na tunasema hivyo kwenye ukurasa wa kuingia badala ya kudokeza vinginevyo.

Kwa muda gani

Mjadala usiofikia ramani yake ndani ya siku 60 tangu kufunguliwa unafutwa kabisa, pamoja na kila kitu kilichomo: kazi isiyokamilika haitunzwi. Ramani ikishapangwa, kumbukumbu inabaki.

Akaunti yako na ulichoandika vinabaki hadi utakapovifuta. Anwani zisizothibitishwa zinakwisha muda pamoja na kiungo chake. Kufuta akaunti yako kunaondoa akaunti na hashi yake ya mawasiliano. Ulichochangia katika mjadala kinabaki, bila kuhusishwa nawe, kwa sababu kura na ramani za watu wengine zilijengwa juu yake — kukiondoa kungeandika upya kumbukumbu yao. Hiyo ndiyo kanuni ileile inayomzuia mtu yeyote kuhariri historia kwa manufaa yake mwenyewe. Kutiwa muhuri (tazama juu) kunafanya kutohusishwa huko kuwe kwa kudumu: baada yake, kufuta akaunti yako kunaondoa kiungo cha mwisho kati yako na chumba, yaani maelezo kwamba ulikuwemo.

Tunachojifunza kutokana nayo

Wakati wa kutiwa muhuri, na wakati huo tu, mjadala unakokotoa jambo moja kuhusu wenyewe: kadi zipi zilikuwa kwenye seti za vibandiko za watu ambao mtazamo wao ulibadilika, ikilinganishwa na wale ambao mtazamo wao haukubadilika. Unatunzwa kama hesabu kwa kila kadi, kamwe si kwa kila mtu, na unakokotolewa kabla majina hayajabadilishwa kwa sababu hauwezi kukokotolewa baadaye. Unaonyeshwa kwenye ramani iliyoamuliwa pamoja na ukubwa wake kando yake, kama maelezo, si kama tokeo.

Haki zako

Omba nakala ya kinachohifadhiwa kukuhusu, omba kirekebishwe, omba akaunti yako ifutwe, au pinga jinsi kinavyotumika: hello@mg.truecauses.org. Tusipoweza kutimiza ombi tunasema kwa nini. Unaweza kuwasilisha malalamiko kwa mamlaka ya ulinzi wa data ya nchi yako.

Wapi

Seva ziko katika Umoja wa Ulaya. Watoa huduma wa barua pepe na malipo wanaweza kuchakata data nje yake chini ya kinga zao za kawaida.

Maandishi rasmi ya Kiingereza yanayofunga kisheria

Privacy

Last updated 1 September 2026. What is held, why, and for how long — written from the code rather than from a template.

What we hold

A handle and a password hash. Salted and hashed; we cannot read your password.
An address only if you give one, and only until you confirm it. On confirmation the address is deleted and replaced by a keyed hash — enough to enforce one mailbox, one account, and to send a password reset; not enough to recover the address. One exception, at your choice: if you ask on your dashboard to receive reminders from the stewards of dialogues you are in, that address is kept for that one purpose — at most one mail per stage, sent by the platform on a steward's request, never shown to the steward — and removed the moment you say so, or with your account.
What you write: cards, clarifications, side-chat turns, votes, links, nominations. Inside a dialogue these are not attributed to you anywhere in the interface. While the dialogue is running, the database records who wrote what, so that one-vote-each and round robin can work at all. Seven days after a dialogue completes it is sealed: every name inside it is replaced by a random one and the list of replacements is not written anywhere. The steward's name stays only as the room's steward; what the steward wrote or voted is replaced like everyone else's. From then on nothing on this server can say who wrote which card, cast which vote, or said what in a side chat — not the steward, not the operator, not a court order. Your own record keeps three things: that you were in that room; the sentence you wrote about where you stood before and after, with where your stickers ended up on its map; and your own numbers from it, such as how many cards you wrote, how many stickers they drew and how often your vote matched the room's verdict, as counts that name no card. Only you can read them, unless you share your totals at a link of your own (never your rooms or cards), which you can end at any time; deleting your account deletes them and ends the link. The room keeps one more thing: a keyed code for each person who sat in it, never for anything they did, so that two groups of rooms sharing people are not counted as independent. It is made from a random value on your account, not from your name; once your account is deleted, it points at no one.
Which dialogues you were in. A list on your record of room ids, never of cards. It is what lets you find a room again, read a private one you were part of after it is sealed, and be refused a second seat in a group of rooms you already sat in.
Private dialogues. A room opened as private is readable by its members and by nobody else, at every stage and after it is settled — not by an applicant, not by someone holding the link. The API, the page and the change feed all refuse the same way.
A signed session cookie, expiring after 14 days. No third-party cookies, no analytics, no advertising, no trackers.
Organisation rosters: keyed hashes of the addresses an administrator supplied, plus a two-character hint so they can recognise a row. The addresses themselves are not stored.

What we do not hold

No location, no phone number, no advertising identifiers, no profile built from your behaviour, no IP logs beyond what the web server keeps transiently. We sell nothing to anybody.

Who else sees it

Other participants see what you wrote, never that you wrote it.
A steward sees the handle of someone asking to join, because that is a decision about whether a particular person belongs.
Other rooms see a card only if you released it.
Processors: a mail provider for confirmations and resets; a payment provider if you subscribe; the server host. If the optional logic assistant is enabled, the sentences of an argument you submit to it are sent to Anthropic — no account details, and the verdict is computed on this server either way.
The operator can read the database. Records are not yet tamper-evident, and we say so on the sign-in page rather than implying otherwise.

How long

A dialogue that does not reach its map within 60 days of opening is purged, with everything in it: unfinished work is not kept. Once the map is laid out, the record stays.

Your account and what you wrote stay until you delete them. Unconfirmed addresses expire with their link. Deleting your account removes the account and its contact hash. What you contributed to a dialogue stays, unattributed, because other people's votes and maps were built on it — removing it would rewrite their record. That is the same rule that stops anyone editing history in their own favour. Sealing (above) makes the unattribution permanent: after it, deleting your account removes the last link between you and a room, the note that you were in it.

What we learn from it

At sealing, and only then, a dialogue computes one thing about itself: which cards were on the sticker sets of the people whose view moved, against those whose view held. It is kept as counts per card, never per person, and it is computed before the names are replaced because it cannot be computed after. It is shown on the settled map with its size next to it, as a description, not a finding.

Your rights

Ask for a copy of what is held about you, ask for it corrected, ask for your account deleted, or object to how it is used: hello@mg.truecauses.org. If we cannot honour a request we say why. You may complain to your data protection authority.

Where

Servers in the European Union. Mail and payment providers may process data outside it under their standard safeguards.

Masharti · Kuhusu · Jinsi inavyofanya kazi