Privacy policy

When you request a clue we store your email address, the language you asked for, the case involved and the clue level sent. We store a one-way hash of your IP address to limit abuse — never the address itself.

When you file a verdict we store the answer you chose, the result and an anonymous session identifier generated in your browser. No account is required and no name is collected unless you type one on your certificate.

Giving your address to receive a clue is not a newsletter subscription. Clue emails are transactional: they are sent because you asked for that specific clue.

Marketing emails — new case releases, bonus evidence, offers — are sent only if you tick the separate, optional box. You can withdraw that consent at any time without losing access to your clues.

Clues are never shown directly on the page and are never included in the body of an email. Each clue is delivered through a signed, single-use, temporary link that expires after 72 hours.

Reader addresses are kept while your investigation is active and for a maximum of 24 months after your last activity, then deleted. Verdict statistics are kept in anonymous, aggregated form only.

You can withdraw marketing consent or delete your email address entirely from the preferences page. Deletion removes your address, your clue history and your consent record.

For any other request, write to privacy@alibidossier.com. We never confirm whether a given address exists in our database to anyone but its owner.

Clue and verification emails are sent from clues@alibidossier.com through our email provider. The sending domain is authenticated with SPF, DKIM and DMARC.