Privacy & Security
UI: /settings/privacy, /settings/security
Privacy tools
Feature privacy_tools · Permission privacy.manage
| Setting | Options |
|---|---|
| Retention days | 0 = off |
| Retention action | none, anonymize, delete |
| IP mode | hash, truncate, store, off |
| Submission cooldown | seconds between public submits |
| CAPTCHA | null, turnstile, hcaptcha, recaptcha |
| Honeypot | on/off |
| Consent required | on/off |
| Policy / Terms URLs | shown on public forms |
Retention is applied by ApplyRetentionPoliciesJob (daily).
Data subject export
Request export from Privacy settings; download when status is ready.
Inbox privacy actions
Anonymize or delete a response from inbox detail when permitted.
Audit log
Feature audit_log · Permission audit.view — timeline of sensitive actions.
Account security (2FA)
/settings/security — Fortify two-factor authentication for the signed-in user.
CAPTCHA env examples
CAPTCHA_PROVIDER=turnstile
TURNSTILE_SITE_KEY=
TURNSTILE_SECRET_KEY=