Clear boundaries
Public and private information
Public after approval
- Name
- Professional role or title
- Optional affiliation
These fields appear only after email confirmation and signature review. An affiliation identifies the signer and does not imply institutional endorsement.
Kept private
- Email address
- Confirmation status and timestamps
- Administrative review records
Email addresses are encrypted in the signature database and are never included in the public signatory list.
Limited purpose
How information is used
Private information is used to send a one-time confirmation link, prevent duplicate or misleading submissions, support signature review, and respond to a signer’s request about their entry. It is not sold, used for advertising, or added to an unrelated mailing list.
Opening a confirmation link does not complete verification. The signer must deliberately select the confirmation button. Email confirmation shows access to the submitted account; it does not by itself prove professional status or institutional endorsement.
Security and retention
Storage, access, and deletion
Service providers and access
Cloudflare hosts the website and encrypted signature database. Cloudflare Turnstile provides the form’s anti-abuse security check, and Resend is the production email-delivery service. Private submission records are limited to the designated organizers responsible for verification and review.
Retention
Confirmation links expire after 24 hours. Unconfirmed submissions are removed after the verification window and a short abuse prevention period. Rejected or withdrawn private records are removed within 30 days. A private email address is retained while a signature is pending review or published so verified correction and withdrawal requests can be handled; it is removed when the associated private record is deleted. Approved public fields remain while a signature is published. After deletion, limited copies may remain temporarily in Cloudflare backup recovery and email-provider systems under their operational retention windows.
Correction or withdrawal requests
A signer can request a correction or withdrawal by replying to a verification message. Requests are verified through the same private email address before a public entry is changed or removed.