Tillyard
Donate
Join the list
Donate

Policies

Who works for us

A short list of companies that handle information for us, and what each one receives.

18 listed · 6 in use today

  1. Cloudflare

    Hosting, the database, the live rooms, the network in front of the site and protection against attacks

    Receives
    Everything the site stores, and every request made to it, including network addresses.
    Never receives
    Anything the site itself never holds: a date of birth, an identity document, card or bank details.
    Today
    In use.

  2. Cloudflare Turnstile

    The bot check on public forms

    Receives
    Signals from your browser on the forms that use it, and from the site the token the check produced with your network address.
    Never receives
    Your name, your email address or anything you typed into the form.
    Today
    In use.

  3. Cloudflare Access

    The sign-in gate in front of the staff console

    Receives
    Staff sign-in details. The site itself only asks it for its published signing keys.
    Never receives
    Anything about a member.
    Today
    Not in use yet.

  4. The email delivery provider in use (Resend or Cloudflare)

    Email delivery

    Receives
    The recipient's address, the subject and the fixed wording of each email we send.
    Never receives
    Anything one member wrote to another. No tracking pixel and no tracked link is added.
    Today
    Not in use yet.

  5. OpenAI's moderation service, and a safety model on Cloudflare Workers AI

    Screening what members write for safety

    Receives
    The text being checked.
    Never receives
    The writer's name, email address, account or network address.
    Today
    In use.

  6. Crossref

    Looking up a source by its DOI, and checking it for a retraction or a correction

    Receives
    The DOI, and the address of the site's contact mailbox so Crossref can write to the site if it must.
    Never receives
    Anything about the member who asked.
    Today
    In use.

  7. The DOI Foundation's resolver at doi.org

    Checking that a DOI exists when Crossref does not hold it

    Receives
    The DOI.
    Never receives
    Anything about the member who asked.
    Today
    In use.

  8. Open Library, run by the Internet Archive

    Looking up a book by its ISBN

    Receives
    The ISBN, and the address of the site's contact mailbox.
    Never receives
    Anything about the member who asked.
    Today
    In use.

  9. Zenodo, run by CERN

    Giving a published paper or a data notebook a permanent DOI, only when its author asks

    Receives
    The one paper or notebook the author chose to deposit: its text, title, abstract and keywords, the author's name and college, and the address of its page here. Zenodo makes the record public and keeps it permanently.
    Never receives
    Anything the author did not choose to deposit.
    Today
    Not in use yet.

  10. A notification service, to be named here once chosen

    Urgent alerts to the president's phone

    Receives
    A ticket number or a count of waiting items.
    Never receives
    A name, an email address or anything a member wrote.
    Today
    Not in use yet.

  11. Stripe

    Taking tips, on its own pages and off this site

    Receives
    Whatever the payer gives Stripe on Stripe's own pages.
    Never receives
    Anything from this site: the site sends Stripe nothing about you.
    Today
    Not in use yet.

  12. Stripe

    Taking gifts that sponsors and donors start from a sponsor's page or the payments API, on Stripe's own checkout page

    Receives
    The amount, what the gift is for, a reference number and the name the giver typed. The giver gives Stripe their card details on Stripe's own page.
    Never receives
    Anything about a student.
    Today
    Not in use yet.

  13. USAJOBS and The Muse

    Listings of openings shown in The Almanac

    Receives
    A fixed query and the site's own key.
    Never receives
    Anything about any member.
    Today
    Not in use yet.

  14. Cloudflare Realtime

    Carrying voice at study-room tables and in calls between connections, so members never see each other's network addresses

    Receives
    The sound of a voice conversation while it is happening, and each browser's offer to connect, which includes its network address.
    Never receives
    A recording: nothing anyone says is recorded or kept, by us or for us.
    Today
    Not in use yet.

  15. Cloudflare

    Reading the site's own usage figures for the staff console

    Receives
    A read-only token and a request for the day's totals.
    Never receives
    Anything about any member.
    Today
    Not in use yet.

  16. To be named here once a backup procedure is adopted

    Keeping the weekly backup copy

    Receives
    A copy of the database.
    Never receives
    Nothing is held back from a backup: it is a copy of what the site stores.
    Today
    Not in use yet.

  17. A mailbox provider, to be named here once chosen

    The company's own mailboxes

    Receives
    Email you send to our addresses.
    Never receives
    Anything you did not send us by email.
    Today
    Not in use yet.