Privacy Policy
Last updated: February 17, 2026
Epstein Exposed is a non-commercial, public interest research project operated by an individual maintainer. This policy explains what data we collect, how we use it, and your rights regarding that data.
Information We Collect
Account Information (Optional)
If you create an account, we collect your email address, display name, and profile image. You may sign up with email/password or via Google or GitHub OAuth. Account data is stored in a PostgreSQL database hosted by Neon. Sessions use HTTP-only cookies with 7-day expiration.
Community Contributions
If you submit corrections, new persons, documents, or other data through our community features, we collect the content you submit along with your account information. Comments, dossiers, and community notes are stored in Supabase.
AI Chat Interactions
Chat messages are processed by Anthropic's Claude API. File uploads (PDF, images, CSV, TXT — max 4 MB) are processed in-memory only and are not stored on our servers. IP addresses are used transiently for rate limiting (10 uploads/hour) and are not persisted.
Analytics
We use Vercel Analytics and Vercel Speed Insights to collect anonymized page view data and performance metrics. We do not use Google Analytics or any advertising trackers.
Server Logs
Standard HTTP server logs (IP address, user agent, timestamp, pages requested) are retained by Vercel per their data retention policy.
How We Use Your Information
- Operate and maintain the site
- Process community contributions and submissions
- Authenticate your account and manage sessions
- Rate-limit API usage to prevent abuse
- Improve site performance via anonymized analytics
- Respond to inquiries sent to our contact email
Third-Party Services
We use the following services, each with their own privacy policies:
- Vercel — Hosting, analytics, speed insights
- Supabase — Community database and auth
- Neon — PostgreSQL database
- Anthropic — AI chat processing (Claude API)
- Google, GitHub — OAuth login providers
- PayPal, Cash App, Buy Me a Coffee — Donation processing (we do not see or store payment card information)
Data Retention
- Account data is retained until you request deletion.
- Community submissions are retained indefinitely as part of the public record.
- Analytics data is retained per Vercel's standard retention policy.
- AI chat conversations are not stored on our servers.
Data Security
We enforce HTTPS with HSTS preload, Content Security Policy headers, X-Frame-Options, and strict referrer policies. We do not request camera, microphone, or geolocation permissions. Our database providers (Neon, Supabase) encrypt data at rest and in transit.
Your Rights
- Deletion: Request deletion of your account and personal data by emailing contact@epsteinexposed.com.
- Access: Request a copy of the data we hold about you.
- Correction: Request correction of inaccurate personal data.
Note: We cannot delete information from public court records or government documents that we index. See our DMCA & Takedown page for content removal requests.
Children's Privacy
This site is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us and we will promptly delete it.
International Users
This site is hosted in the United States. If you access the site from outside the US, your data is transferred to and processed in the US. We comply with applicable data protection laws to the extent practicable for a non-commercial project.
Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be noted in our changelog.
Contact
For privacy-related inquiries: contact@epsteinexposed.com
See also: Legal Disclaimer · Terms of Service · DMCA & Takedown