Disclosures to Analyst Personnel

Your Archivist Key. Case classifications you have submitted. Messages exchanged with your supervisor and the Scheduler. Timestamps of state transitions across your assigned files. Audit logs of administrative access to your records.

The Office does not request or retain your given name, age, place of residence, electronic mail address, telephone, image, voice, photograph, or device identifiers beyond those required for session continuity. The Office does not maintain records of your activity outside this portal. The Office does not engage behavioral measurement firms or commercial analysts and does not embed any third-party tracking software.

The originating network address of a request is briefly noted when a brand-new Archivist Key is issued, solely to prevent abuse of the issuance routine. This note is purged after twenty-four (24) hours and is not used to identify you across sessions or link your key to any external record.

The Office does not sell its records. Two service providers are retained for the storage and transmission of records and act under written instruction:

• Records server · Supabase, Inc.— stores your Archivist Key, case state, and correspondence on the Office’s behalf in an encrypted database located in the United States.
• Message courier · Resend, Inc. — transmits supervisor notification emails when an analyst files a reply. Resend retains transmission metadata for a limited period as required to complete delivery.

Neither provider may retain copies of your records beyond what is required to perform their function under the Office’s direction. The Office does not engage advertisers, third-party analytics, or audience-measurement networks of any kind.

Records persist for the lifetime of your assigned case files. Closed records may be purged at the Office’s discretion. Player-authored correspondence (replies you file to your supervisor) is retained for a period not to exceed ninety (90) calendar days. Analysts may at any time submit a Request for Key Destruction to the Reading Room desk; the Office shall comply within ten (10) working days, after which all records associated with the destroyed key are unrecoverable.

Provisional analysts of any age may hold an Archivist Key. The Office does not request age information at any point. Analysts under 13 are not subject to additional restrictions or processing because no additional information is collected from any analyst, regardless of age. The Office does not direct its materials at children but does not exclude them as analysts.

A small number of senior continuity personnel have access to the Reading Room — an administrative interface from which they may read analyst correspondence addressed to a supervisor and respond on behalf of the Office. All such access is logged. The Reading Room is gated behind passphrase-and-token sign-in; vendor identity providers are not used.

The Office sets two cookies as necessary for the operation of the portal: an Archivist Key session cookie (co_session, 30 days) and, where applicable, an administrative session cookie (co_admin_session, 4 hours). Both are httpOnly, signed against tampering, and transmitted only over encrypted connections. No third-party cookies are set.

You may at any time:

• Generate a new Archivist Key and abandon a previous one. No personal data ties them together.
• Reset your local cache from the footer of any internal page (the Reset Key control).
• Submit a Request for Key Destruction (see Retention above).

This protocol is current as of 2026-05-17. Subsequent amendments will be filed in the Reading Room and announced via supervisor message in your mailbox.