Submission privacy
This notice explains how Clinical Cyber Dispatch handles information sent through Contact & Contribute. The form is for editorial requests and general feedback. It is not an emergency response service or a confidential disclosure channel.
What we collect and why
We collect your selected category, subject, message, public links, optional name and email address, reply preference, and confirmation that you have read the scope and privacy notice. We also record a submission reference, receipt time, and processing status. Limited technical security information is used to prevent abuse, handle repeat requests safely, and operate the service; source hashes expire after two days.
We use this information to review suggestions, assess whether research or coverage is appropriate, and prepare a possible reply. Requesting a reply does not guarantee a response, publication, or a completion date. Submitting the form does not create an account or subscribe you to a newsletter. Any newsletter signup is a separate choice.
Information you should not send
Please share only information you are authorized to provide. Do not include patient information, credentials, internal logs, confidential documents, or details of an active or non-public incident. This form is for editorial requests and general feedback; it is not an emergency response or confidential disclosure channel. Requests do not guarantee a reply, coverage, or a completion date.
Who processes a submission
- Ghost hosts the publication and its contact and privacy pages. Its ordinary site services are separate from the intake service.
- Tailscale provides the HTTPS connection to our owner-operated intake service.
- Owner-operated OpenClaw services support private editorial processing and review after the submission is stored. The public intake service is separated from those private tools.
- OpenAI may receive a sanitized version of an eligible submission to help prepare a draft for human review. The submitted name and email are removed from that drafting context, and local screening runs first. Automated screening and removal have limits, so do not include sensitive information anywhere in your message.
- Telegram is used for private owner review. Eligible submission content and proposed reply details may appear in the owner’s private review conversation. Items held by local sensitive-content screening are represented there by their reference and a limited reason instead of their original contents.
- Brave Search and Firecrawl may be used for owner-approved research into public sources. Research uses public source material, rather than your contact details or private submission text. Submitting a link does not automatically fetch it or start research.
Access is limited to the publication’s authorized operator and the services needed for these purposes. Draft replies and research remain subject to editorial review. Replies are sent manually; the form does not send an automatic email to you.
How long information is kept
- Closed submissions: submission text and contact details are kept for up to 90 days after closure.
- Spam and submissions held by sensitive-content screening: kept for up to 7 days.
- Open submissions older than 30 days are flagged for closure review; that flag does not itself delete the submission.
- Contact-service backup snapshots expire after 7 days. Copies in those backups may therefore remain for up to 7 days after deletion from primary storage.
After message text and contact details are deleted, opaque receipt references, minimal status and action records, and aggregate counts may remain to prevent duplicate processing and operate the inbox.
These periods describe our contact-service storage. Telegram messages and copies handled by service providers have separate retention and deletion controls. Deleting a primary record does not guarantee immediate or complete deletion from Telegram, providers, or their backups. We cannot promise automatic removal of every copy.
Privacy questions and deletion requests
Contact ceo.clinicalcyber@proton.me with a privacy question or deletion request. Include your submission reference if you have it, and avoid sending the sensitive material again. We will assess requests against the records and copies we can control and explain relevant limits.