Sirri

A taƙaice

Sabis ɗin yana riƙe da sunan mai amfani, lambar sirrin kalmar sirri (hash) da abin da kuka rubuta a tattaunawa. Ana maye gurbin tabbataccen adireshi da lambar sirri (keyed hash), sai dai idan kun nemi karɓar tunatarwa. A cikin tattaunawa ba a nuna komai da kuka rubuta a ƙarƙashin sunanku, kuma kwana bakwai bayan tattaunawa ta kammala ana rufe ta da hatimi: ana maye gurbin kowane suna a cikinta da na bazata, don haka babu wanda zai iya faɗin wa ya rubuta me. Babu masu bin diddigi, babu nazarin zirga-zirga, babu talla, kuma ba a sayar da komai. Ana share tattaunawar da ba a kammala ba bayan ƙayyadaddun kwanaki; waɗanda aka kammala suna nan. Kuna iya neman kwafin bayananku, gyara ko share asusunku. Sabobin suna cikin Tarayyar Turai.

Fassara ce don ku duba. Rubutun Turanci da ke ƙasa shi ne mai iko.

Sirri

An sabunta na ƙarshe a 1 ga Satumba 2026. Abin da ake riƙewa, me ya sa, kuma na tsawon wane lokaci — an rubuta daga lambar manhajar ba daga samfurin rubutu ba.

Abin da muke riƙewa

Sunan mai amfani da lambar sirrin kalmar sirri (hash). An gauraya kuma an mayar da ita lambar sirri; ba za mu iya karanta kalmar sirrinku ba.
Adireshi ne kawai idan kun bayar da shi, kuma har sai kun tabbatar da shi kawai. Da zarar an tabbatar ana share adireshin a maye gurbinsa da lambar sirri (keyed hash) — ta isa a tabbatar akwatin imel ɗaya, asusu ɗaya, a kuma aika sake saita kalmar sirri; ba ta isa a dawo da adireshin ba. Togiya ɗaya, bisa zaɓinku: idan kun nema a allon bayananku ku riƙa karɓar tunatarwa daga jagororin tattaunawar da kuke ciki, ana adana wannan adireshi don wannan dalili kaɗai — imel ɗaya a kowane zango mafi yawa, wanda dandalin ke aikawa bisa roƙon jagora, ba a taɓa nuna shi ga jagora ba — kuma ana cire shi da zarar kun ce haka, ko tare da asusunku.
Abin da kuka rubuta: katuna, bayanai, zantuttukan hirar gefe, ƙuri’u, alaƙoƙi, gabatarwa. A cikin tattaunawa ba a danganta waɗannan da ku a ko’ina a cikin manhajar ba. Yayin da tattaunawa ke gudana, rumbun bayanai yana rubuta wa ya rubuta me, don ƙuri’a ɗaya ga kowa da zance bi-da-bi su iya aiki. Kwana bakwai bayan tattaunawa ta kammala ana rufe ta da hatimi: ana maye gurbin kowane suna a cikinta da na bazata kuma ba a rubuta jerin maye gurbin a ko’ina ba. Sunan jagora yana nan ne kawai a matsayin jagoran ɗakin; abin da jagora ya rubuta ko ya jefa wa ƙuri’a ana maye gurbinsa kamar na kowa. Daga nan babu abin da ke wannan sabar da zai iya faɗin wa ya rubuta wane kati, ya jefa wace ƙuri’a, ko ya faɗi me a hirar gefe — ba jagora ba, ba mai gudanarwa ba, ba umarnin kotu ba. Bayananku suna riƙe abubuwa uku: cewa kun kasance a wannan ɗaki; jimlar da kuka rubuta game da matsayinku kafin da bayan, tare da inda sitikokinku suka ƙare a taswirarsa; da alƙaluman ku daga gare shi, kamar katuna nawa kuka rubuta, sitikoki nawa suka samu da sau nawa ƙuri’arku ta dace da hukuncin ɗakin, a matsayin adadi da ba ya ambaton wani kati. Ku kaɗai za ku iya karanta su, sai dai idan kun raba jimillarku a mahaɗinku (ba ɗakunanku ko katunanku ba), wanda za ku iya kashewa a kowane lokaci; share asusunku yana share su kuma yana kashe mahaɗin. Ɗakin yana riƙe abu ɗaya kuma: lambar sirri ga kowane mutumin da ya kasance a cikinsa, ba ga wani abu da ya yi ba, don kada a ƙirga rukunonin ɗakuna biyu masu mutane iri ɗaya a matsayin masu zaman kansu. An yi ta daga wata ƙima ta bazata a asusunku, ba daga sunanku ba; da zarar an share asusunku, ba ta nuna kowa.
Tattaunawar da kuka kasance a ciki. Jeri a bayananku na lambobin shaidar ɗakuna, ba na katuna ba. Shi ne ke ba ku damar sake samun ɗaki, karanta ɗaki na sirri da kuka kasance a ciki bayan an rufe shi da hatimi, da kuma a hana ku kujera ta biyu a rukunin ɗakunan da kuka riga kuka kasance a ciki.
Tattaunawa na sirri. Ɗakin da aka buɗe a matsayin na sirri membobinsa ne kaɗai ke iya karanta shi, ba kowa ba, a kowane zango da kuma bayan ya daidaita — ba mai neman shiga ba, ba wanda ke riƙe da mahaɗin ba. API, shafin da tashar sauye-sauye duk suna ƙi ta hanya ɗaya.
Kuki na zama mai sa hannu, wanda wa’adinsa ke ƙarewa bayan kwanaki 14. Babu kukis na wasu kamfanoni, babu nazarin zirga-zirga, babu talla, babu masu bin diddigi.
Jerin membobin ƙungiyoyi: lambobin sirri (keyed hash) na adiresoshin da mai gudanarwa ya bayar, tare da alamar haruffa biyu don ya gane layi. Ba a adana adiresoshin kansu ba.

Abin da ba ma riƙewa

Babu wuri, babu lambar waya, babu lambobin talla, babu bayanan da aka gina daga halayenku, babu rajistar IP fiye da abin da sabar yanar gizo ke riƙewa na ɗan lokaci. Ba ma sayar wa kowa komai.

Wa kuma ke gani

Sauran mahalarta suna ganin abin da kuka rubuta, ba cewa ku ne kuka rubuta ba.
Jagora yana ganin sunan mai amfani na wanda ke neman shiga, saboda wannan shawara ce game da ko wani mutum ya dace.
Sauran ɗakuna suna ganin kati ne kawai idan kun sake shi.
Masu sarrafa bayanai: mai bayar da sabis na imel don tabbatarwa da sake saitawa; mai bayar da sabis na biyan kuɗi idan kun yi rajistar biya; mai ɗaukar sabar. Idan an kunna mataimakin dabaru na zaɓi, jimlolin hujjar da kuka miƙa masa ana aika su zuwa Anthropic — babu bayanan asusu, kuma ana lissafa hukuncin a wannan sabar ko ta yaya.
Mai gudanarwa zai iya karanta rumbun bayanai. Bayanan ba su da kariyar da ke nuna an taɓa su tukuna, kuma muna faɗin haka a shafin shiga maimakon nuna kamar ba haka ba ne.

Har yaushe

Tattaunawar da ba ta kai ga taswirarta cikin kwanaki 60 da buɗewa ba ana goge ta, tare da duk abin da ke cikinta: ba a adana aikin da ba a kammala ba. Da zarar an shimfiɗa taswira, bayanan suna nan.

Asusunku da abin da kuka rubuta suna nan har sai kun share su. Adiresoshin da ba a tabbatar ba wa’adinsu yana ƙarewa tare da mahaɗinsu. Share asusunku yana cire asusun da lambar sirrin adireshinsa. Abin da kuka bayar a tattaunawa yana nan, ba tare da sunanku ba, saboda an gina ƙuri’u da taswirorin wasu mutane a kansa — cire shi zai sake rubuta bayanansu. Wannan ƙa’ida ɗaya ce da ke hana kowa gyara tarihi don amfanin kansa. Rufewa da hatimi (a sama) tana sa rashin ambaton suna ya zama na dindindin: bayan haka, share asusunku yana cire alaƙa ta ƙarshe tsakaninku da ɗaki, bayanin cewa kun kasance a cikinsa.

Abin da muke koya daga gare shi

A lokacin rufewa da hatimi, kuma a lokacin kaɗai, tattaunawa tana lissafa abu ɗaya game da kanta: waɗanne katuna ne ke cikin sitikokin mutanen da ra’ayinsu ya sauya, idan aka kwatanta da na waɗanda ra’ayinsu bai sauya ba. Ana adana shi a matsayin adadi ga kowane kati, ba ga kowane mutum ba, kuma ana lissafa shi kafin a maye gurbin sunaye saboda ba za a iya lissafa shi bayan haka ba. Ana nuna shi a taswirar da ta daidaita tare da girmansa a gefensa, a matsayin bayani, ba abin da aka gano ba.

Hakkokinku

Ku nemi kwafin abin da ake riƙewa game da ku, ku nemi a gyara shi, ku nemi a share asusunku, ko ku ƙi yadda ake amfani da shi: hello@mg.truecauses.org. Idan ba za mu iya cika buƙata ba za mu faɗi dalili. Kuna iya kai ƙara ga hukumar kare bayanai ta ƙasarku.

Ina

Sabobi suna cikin Tarayyar Turai. Masu bayar da sabis na imel da biyan kuɗi za su iya sarrafa bayanai a wajenta ƙarƙashin matakan kariyarsu na yau da kullum.

Rubutun Turanci mai iko

Privacy

Last updated 1 September 2026. What is held, why, and for how long — written from the code rather than from a template.

What we hold

A handle and a password hash. Salted and hashed; we cannot read your password.
An address only if you give one, and only until you confirm it. On confirmation the address is deleted and replaced by a keyed hash — enough to enforce one mailbox, one account, and to send a password reset; not enough to recover the address. One exception, at your choice: if you ask on your dashboard to receive reminders from the stewards of dialogues you are in, that address is kept for that one purpose — at most one mail per stage, sent by the platform on a steward's request, never shown to the steward — and removed the moment you say so, or with your account.
What you write: cards, clarifications, side-chat turns, votes, links, nominations. Inside a dialogue these are not attributed to you anywhere in the interface. While the dialogue is running, the database records who wrote what, so that one-vote-each and round robin can work at all. Seven days after a dialogue completes it is sealed: every name inside it is replaced by a random one and the list of replacements is not written anywhere. The steward's name stays only as the room's steward; what the steward wrote or voted is replaced like everyone else's. From then on nothing on this server can say who wrote which card, cast which vote, or said what in a side chat — not the steward, not the operator, not a court order. Your own record keeps three things: that you were in that room; the sentence you wrote about where you stood before and after, with where your stickers ended up on its map; and your own numbers from it, such as how many cards you wrote, how many stickers they drew and how often your vote matched the room's verdict, as counts that name no card. Only you can read them, unless you share your totals at a link of your own (never your rooms or cards), which you can end at any time; deleting your account deletes them and ends the link. The room keeps one more thing: a keyed code for each person who sat in it, never for anything they did, so that two groups of rooms sharing people are not counted as independent. It is made from a random value on your account, not from your name; once your account is deleted, it points at no one.
Which dialogues you were in. A list on your record of room ids, never of cards. It is what lets you find a room again, read a private one you were part of after it is sealed, and be refused a second seat in a group of rooms you already sat in.
Private dialogues. A room opened as private is readable by its members and by nobody else, at every stage and after it is settled — not by an applicant, not by someone holding the link. The API, the page and the change feed all refuse the same way.
A signed session cookie, expiring after 14 days. No third-party cookies, no analytics, no advertising, no trackers.
Organisation rosters: keyed hashes of the addresses an administrator supplied, plus a two-character hint so they can recognise a row. The addresses themselves are not stored.

What we do not hold

No location, no phone number, no advertising identifiers, no profile built from your behaviour, no IP logs beyond what the web server keeps transiently. We sell nothing to anybody.

Who else sees it

Other participants see what you wrote, never that you wrote it.
A steward sees the handle of someone asking to join, because that is a decision about whether a particular person belongs.
Other rooms see a card only if you released it.
Processors: a mail provider for confirmations and resets; a payment provider if you subscribe; the server host. If the optional logic assistant is enabled, the sentences of an argument you submit to it are sent to Anthropic — no account details, and the verdict is computed on this server either way.
The operator can read the database. Records are not yet tamper-evident, and we say so on the sign-in page rather than implying otherwise.

How long

A dialogue that does not reach its map within 60 days of opening is purged, with everything in it: unfinished work is not kept. Once the map is laid out, the record stays.

Your account and what you wrote stay until you delete them. Unconfirmed addresses expire with their link. Deleting your account removes the account and its contact hash. What you contributed to a dialogue stays, unattributed, because other people's votes and maps were built on it — removing it would rewrite their record. That is the same rule that stops anyone editing history in their own favour. Sealing (above) makes the unattribution permanent: after it, deleting your account removes the last link between you and a room, the note that you were in it.

What we learn from it

At sealing, and only then, a dialogue computes one thing about itself: which cards were on the sticker sets of the people whose view moved, against those whose view held. It is kept as counts per card, never per person, and it is computed before the names are replaced because it cannot be computed after. It is shown on the settled map with its size next to it, as a description, not a finding.

Your rights

Ask for a copy of what is held about you, ask for it corrected, ask for your account deleted, or object to how it is used: hello@mg.truecauses.org. If we cannot honour a request we say why. You may complain to your data protection authority.

Where

Servers in the European Union. Mail and payment providers may process data outside it under their standard safeguards.

Sharuɗɗa · Game da mu · Yadda yake aiki