Privacy
BitTorrent is not anonymous. Null Authority operates a curated public tracker, and tracker operation can see network and protocol data during announces.
Formal privacy requests must be sent to null-authority@protonmail.com. IRC on irc.libera.chat / #nullauthority is a general contact option, not the formal privacy request channel.
Controller
Null Authority is the controller for this public website and tracker.
Data processed
- Public browsing can process IP addresses needed to serve pages and static files.
.torrentdownloads can process IP addresses, timestamps, requested paths, and basic delivery metadata.- Tracker announces can process IP addresses, peer IDs, ports, info hashes, timestamps, client metadata, event values, and transfer counters.
- Contact and abuse emails are processed in the operator mailbox.
- Admin and moderation actions can create audit records used for security, abuse handling, and catalog integrity.
Public exposure limits
Public UI and APIs never expose peer IPs, peer IDs, peer lists, raw announce data, raw scrape data, audit rows, or operational secrets. Public pages show approved catalog metadata, not peer identities.
Logs and retention
- Tracker access logs are disabled in production.
- Public web access logs are disabled in production after the logging-retention task is complete.
- Tracker peer state is held in memory only and normally expires after about 45 minutes. It is not backed up.
- Moderation and audit records may be retained when needed for abuse defense, security, legal claims, or moderation integrity.
Tracking and cookies
Null Authority uses no analytics, ads, social tracking, or third-party assets. Admin session cookies are essential admin-only cookies. No public cookie banner is needed while there are no public accounts, analytics, or non-essential cookies.
Privacy requests
Use null-authority@protonmail.com for access, erasure, rectification, objection, restriction, complaint, or general privacy questions. Do not send full announce URLs, peer ID lists, peer IP lists, passwords, session cookies, or operational secrets.