PRIVACY & DATA HANDLING
Protect the students who speak up.
Effective July 15, 2026. This independent student-led project is brought to you by the UC Davis Minecraft Server community and is not an official UC Davis website.
What we collect
The incident form may collect an issue category, incident date and location, amount, optional citation reference, connectivity status, factual narrative, available evidence, requested outcome, optional Transportation Services employment relationship, optional personal email or phone number, and reuse preferences.
What not to submit
Do not submit student IDs, driver’s-license numbers, financial information, home addresses, passwords, full VINs, or unredacted license plates. File uploads are disabled in the initial release.
How reports are protected
Production submissions travel over HTTPS through a Vercel server function. Vercel BotID reduces automated abuse. The function validates and limits every field, checks the exact website origin, and writes to a private Supabase table. Row Level Security is enabled and the browser receives no database credential. The application does not store raw IP addresses; it stores a daily rotating cryptographic digest solely to enforce an hourly submission limit.
Access and publication
Raw submissions are restricted to project operators and are never published automatically. Contact details and employment relationship answers stay private. Public analysis uses aggregate data or redacted excerpts consistent with each submitter’s selected permission. Attribution requires separate affirmative approval.
Retention
Raw reports are retained for up to 180 days, then deleted or anonymized unless needed for an active records request, appeal, or explicitly approved case study.
Access, correction, or deletion
Email think@ucdavis.edu. We may need to verify enough information to identify the report before changing or deleting it.