Privacy

This public site

This page sets no cookies, loads no analytics, embeds no third-party scripts, and reads no fingerprints. The only network connections your browser makes from here are to fetch fonts (Google Fonts CDN) and the page itself from Cloudflare's edge.

Edge metadata

Cloudflare records standard edge metadata for every request: source IP, user agent, requested path, response code, timestamp. We do not query these logs except for security incident response, and we do not enrich, sell, or share them. Cloudflare's own retention applies and is documented in their privacy policy.

DNS for lxc-2.net is also Cloudflare; queries are answered at their edge with their resolver privacy posture. DNSSEC is enabled.

Email to entry@

If you write to entry@lxc-2.net: your message is forwarded by Cloudflare Email Routing into a private GitLab Service Desk project as a confidential issue, visible only to the membership committee. We retain the thread for as long as we need it to make the membership decision and for a reasonable record after; you can ask for deletion at any time.

Member data (if you're a member)

Your messages in the chat are retained indefinitely as part of the collective's record. Threaded conversation only works if old threads stay coherent. On exit you can request:

• An export of everything you personally posted.
• Redaction of your display name from retained messages (replaced with [former member]).

We do not delete the message text itself, since it is part of others' threaded conversations. This trade-off is named upfront so you can decide whether the operating model fits.

Backups are encrypted at rest with keys held by the host, and stored offsite at Cloudflare R2. Logs of internal services are retained 30 days locally; long-term archive logs have email addresses and IPs redacted after 90 days.

Security disclosure

For security disclosures (vulnerabilities, suspected compromise, anything sensitive), see /.well-known/security.txt for the contact and PGP key.

Jurisdiction

We comply with lawful process. LXC-2 is not a subpoena-resistant network; if that's what you need, this is not your op-sec layer. We are building a quiet, private workshop with strong identity and clean boundaries.