Privacy and retention
Feedback Kit does not require visitor accounts, email addresses, analytics trackers, third-party cookies, or a runtime language model.
Anonymous sessions and votes
The widget stores a signed token in that website's own local storage. The token is bound to one project and one allowed website origin, and it does not identify a person. Clearing that website's local storage resets the anonymous vote identity. Requests omit browser credentials and cookies.
Private reports and public summaries
New reports are private and visible to the authorized project developer. A developer must edit and publish a separate public title and summary. Private text, source path, session token, and IP address are not sent to the public candidates API or the Agent API. Page paths are not collected unless a project owner explicitly adds data-send-page-path="true" to the embed script.
Retention and deletion
Feedback Kit does not currently apply an automatic age-based deletion policy. Project developers can manually delete an unmerged record from the private review queue. Merged source records are retained so the vote merge and review history remain consistent; deleting merged audit records is not available in this MVP. Share only information you are comfortable sending to the project developer.
Abuse controls
Short-lived rate-limit buckets store a keyed hash derived from the request IP, not the raw address, and are removed after seven days. Anonymous session tokens expire after 90 days. Admin sessions expire after 12 hours.