How we handle your data
Faultline creates no account, stores no identifier, and destroys your report after 30 days by deleting the key that decrypts it.
No account, no identifier
The diagnostic asks nothing that identifies you or your organization. Your report is reachable through a link only you hold — we cannot tell whose it is, and cannot send it again if you lose it.
Encrypted at rest, with a key of its own
Your answers and your report are encrypted with a key unique to that record. Destroying the record destroys the only key that could read it.
Destroyed, not hidden
After 30 days the report is deleted along with its key. That is what makes the expiry real rather than a row flagged invisible — and it is checked when the link is opened, not only when the cleanup job runs.
Email, only if you ask
The optional delivery email is used once, to send you the report, and is never turned into an account or a mailing list.
Feedback stays detached
Feedback is stored with no link of any kind to a report or a session. It cannot be traced back to a diagnostic, by us or by anyone else.
The destruction method follows NIST SP 800-88 Rev. 2 on media sanitization — deleting the key rather than trusting a deleted row. NIST SP 800-88 Rev. 2