Privacy Policy & Data Practices
Last updated: September 2026 • Compliant with minimalist data protection principles.
1. Anonymous by Default
Just Another Salaryman does not require account registration, passwords, emails, or personal identifiers. Anyone can read the narrative, propose suggestions, and vote freely.
2. Salted HMAC-SHA256 IP Hashing
To prevent bot flooding and enforce the rate limit (1 submission, 5 votes per 30-minute turn), incoming client IP addresses are immediately hashed in-memory using HMAC-SHA256 with a dedicated secret key managed in GCP Secret Manager. Your raw IP address is never stored in any database or written to disk.
3. Nickname Cookie (Functional & Optional)
If you optionally choose to enter a nickname when proposing a story suggestion, a functional cookie (user_nickname) is saved in your browser with SameSite=Laxand a 30-day expiration so you do not have to retype it. We do not use third-party tracking, advertising, or profiling cookies.
4. Data Deletion & Redaction Requests
If a submission contains personal information, copyrighted text, or offensive material, any user may click the “Report” button or contact the administrators to trigger immediate redaction via our automated post-publish redaction tools.