1. Browsing & Search

We do not track, log, or store any personally identifiable information (PII) of users browsing or searching our directory. We do not use Google Analytics, Facebook Pixel, or any third-party tracking scripts. No cookies are used to follow your behavior across pages or sessions.

Our infrastructure is designed to be passive and surveillance-resistant. The directory works fully with JavaScript disabled in the Tor Browser.

2. Listing Submissions

When submitting an onion service to the directory, we collect the minimum data required to operate the verification system:

• PGP Public Key: Stored to verify ownership of the onion service. The key is displayed publicly on the listing page so visitors can cross-check authenticity.
• Contact Email: Used exclusively for admin correspondence during the approval process and for emergency takedown requests. Never displayed publicly.
• Onion URL: The primary .onion address being listed. Displayed publicly as the core function of the directory.
• Mirror URLs: Optional additional .onion addresses. Displayed publicly alongside the primary URL.
• Description & Tags: Used to categorize and describe the listed service. Displayed publicly.

PGP fingerprints are derived from the submitted public key and stored for verification purposes. PGP challenge messages are generated server-side and are not retained after verification is complete.

3. Anonymous Accounts

No registration is required to submit a listing, leave a review, or report a scam. When an unregistered visitor submits content, the system creates an anonymous account with a randomly generated email address and username. These accounts have no connection to your real identity.

If you later register a real account, your anonymous submissions remain linked only to the auto-generated account — not to your registered identity.

4. Reviews & Voting

When submitting a review or voting on an existing review, the following data is recorded:

• IP Address: Stored temporarily to prevent spam and enforce one-review-per-listing constraints. Not displayed publicly.
• Guest Name: If provided, displayed alongside the review. If omitted, "Anonymous" is used.
• Rating: Stored and factored into the listing's average score. Displayed publicly.
• Review Content: Stored and displayed publicly after admin approval.

Vote records (upvote/downvote) store the IP address to prevent duplicate voting. Votes are not displayed publicly with any identifying information.

5. Scam Reporting

When you report a listing as a scam, the system records a session flag to prevent duplicate reports from the same browser session. No personally identifiable information is collected during the report process.

Report counts are public — they affect the listing's risk score and may trigger automatic state changes (scam flag at 10+ reports). However, individual reports are not traceable back to the reporter.

6. Banner Advertising

When submitting a banner advertisement, the following data is collected:

• Contact Email: For admin correspondence regarding the campaign. Not displayed publicly.
• Target URL: The V3 .onion destination address. Embedded in the banner link publicly.
• Banner Image: Auto-converted to WebP format and served statically. No JavaScript or tracking pixels are embedded in ad creatives.

Impression and click counts are stored as aggregate numbers on the banner record. No per-user tracking is performed on ad views or clicks.

7. IP Addresses

IP addresses are collected only when you submit content (reviews, votes, reports). They are used exclusively for spam prevention and rate limiting. IP addresses are never displayed publicly, sold to third parties, or used for behavioral tracking.

If you access Dark Stats through the Tor network, the IP address we see is the exit node — not your real IP. We have no way to de-anonymize Tor users and no interest in doing so.

8. Cookies & Local Storage

We use server-side sessions for short-lived functionality (captcha verification, report spam prevention). These session cookies expire automatically and are not used for tracking.

We do not use persistent cookies for behavioral tracking, retargeting, or advertising. LocalStorage may be used for UI preferences (theme settings). No data in LocalStorage is transmitted to our servers.

9. Server Logs & Transparency

We do not retain server access logs longer than necessary for basic security audits. We do not share user data with advertisers, data brokers, law enforcement, or any third party unless legally compelled by a valid court order originating from a jurisdiction we recognize.

If we ever receive a legal compulsion request that forces disclosure, we will make every effort to notify affected users before disclosure, unless legally prohibited from doing so.

10. Third-Party Links

Our directory contains links to external onion services. We are not responsible for the privacy practices, security, or content of these external sites. Users navigate external links at their own risk.

We verify that the PGP fingerprint of a listed service matches the operator's key, but we cannot control what happens on the destination server after you click through.

11. Data Retention & Deletion

You may request deletion of your personal data at any time by contacting the administrator using the verified PGP key on this page. Deletion requests should specify the listing, review, or account in question and be signed with the associated PGP key where applicable.

We will process verified deletion requests within a reasonable timeframe. Anonymous data that cannot be attributed to a specific identity (aggregate stats, anonymous reviews without contact info) may not be individually deletable.