Skip to main content
Return to Today’s Story

Privacy Policy & Data Practices

Last updated: September 2026 • No accounts, no tracking, no personal data stored.

1. Anonymous by Default

Just Another Salaryman does not require account registration, passwords, emails, or personal identifiers. Anyone can read the narrative, propose suggestions, and vote freely.

2. Salted HMAC-SHA256 IP Hashing

To prevent bot flooding and enforce the rate limit (1 submission, 5 votes per 30-minute turn), incoming client IP addresses are immediately hashed in-memory using HMAC-SHA256 with a dedicated secret key managed in GCP Secret Manager. Your raw IP address is never stored in any database or written to disk.

3. Nickname Cookie (Functional & Optional)

If you optionally choose to enter a nickname when proposing a story suggestion, a functional cookie (nickname) is saved in your browser with SameSite=Laxand a 30-day expiration so you do not have to retype it. We do not use third-party tracking, advertising, or profiling cookies. A nickname is shown publicly on the turn it wins, as attribution. It is stripped from any research dataset we publish.

4. Data Deletion & Redaction Requests

If a submission contains personal information, copyrighted text, or offensive material, any user may click the “Report” button or contact the administrators at admin@justanothersalaryman.com. Reported material is redacted after publication using our automated redaction tools.

5. Bot Defense & reCAPTCHA Enterprise

This site is protected by Google reCAPTCHA Enterprise to mitigate spam, automated vote manipulation, and denial-of-service attacks. reCAPTCHA operates by collecting hardware and software information, such as device and application data, and sending it to Google for security assessment. The information collected is used for providing, maintaining, and improving reCAPTCHA and for general security purposes; it is not used for personalized advertising. Use of reCAPTCHA Enterprise is subject to the Google Privacy Policy and Terms of Service.