Privacy

Ash Reserve is a public information site. It is hosted as a static publication on Cloudflare. The public observation form is not open, and the site does not accept personal submissions.

What this publication is

The pages you are reading are a statically generated website served from Cloudflare. That is a hosting class, not a named data controller. This notice does not name a controller or state a lawful basis.

Public observation intake is closed. The submission route /submit-experience/ is not available, and is deliberately not linked while intake is off. Nothing you type into a form on this site is accepted or stored.

What submissions never collect

There is no field anywhere in this system for any of the following. This is a property of the schema, not a promise about our conduct — there is no column to write them to:

• Government-issued ID documents or ID numbers
• Selfies or liveness-check images
• Your full legal name
• Your residential address
• Account passwords or one-time codes
• Bank account, card or wallet numbers
• Tax documents
• Unredacted support transcripts containing personal details
• Personalised claim, redemption or support-ticket links

If a submission were ever stored

The software can record an operator, a redemption method, an amount band, calendar dates, whether it was a first or repeat redemption, whether verification was already complete, an issue category, and an optional short note. Amounts are bands rather than figures and dates are calendar days rather than timestamps so that a record cannot be matched back to one account.

If that path were ever enabled, free-text would be scanned before it was stored. A submission matching an ID number, a card number, a long account-like digit run, an email address, a phone number, a credential or a personalised link would be refused and nothing would be written. We reject rather than redact, because redacting means it was stored first. That path is not open today.

What we publish

If submissions existed they would appear publicly only inside aggregates, alongside the sample size and date range, and only once a segment reached the publication threshold. No submission would be published on its own or attributed to anyone. There are currently no published observations.

Deletion without identity

Because the schema stores no name, contact, account, or government identifier, there is no way to run a self-serve identity-based access or deletion request. Offering one would require collecting identity in order to prove who you are — which this site will not do.

If a record were ever stored, deletion would be by matching the stored content (operator, method, date band, note) through a moderator, not by asking a reader to identify themselves. That tradeoff is deliberate: no identity collected means no identity-based rights portal.

Identity documents

Ash Reserve never asks for, accepts, receives or stores identity documents. There is no upload capability on this site. If anything claiming to be Ash Reserve asks you to send an ID, a selfie, or account credentials, it is not us — send those only through an operator’s own logged-in account area. See the KYC hub.

Analytics

We use a self-hosted Umami service to measure canonical page paths, token-like campaign labels, external referrer origins, device categories, pageviews, and allowlisted interactions such as redemption-detail views and outbound clicks. Amounts, dates, free text, raw query strings, destination URLs, and account details are dropped before analytics is sent.

A per-site pseudonymous session identifier is made from transient network and device signals and rotates every week. The analytics database does not store raw IP addresses or raw user-agent strings. It keeps device, browser and operating-system categories, country and, for U.S. visits, state or region. It does not collect city or precise location. Analytics records are deleted after 13 months.

We do not sell or share analytics data, use it for targeted advertising, enable session replay, identify you, use fingerprinting, or join your activity across our sites.

Analytics cookies

Umami does not set analytics cookies. No analytics consent banner is shown. This site sets no advertising cookies.

Outbound links

Links to operators carry nofollow noopener noreferrer. Once you follow one you are on that operator’s site under their privacy notice, not ours.