System transparency
Transparency note: How this node handles privacy, data retention, and system security.
Epistemic position
This project doesn't automatically assume UAPs are extraterrestrial. I just collect claims, official documents, and science tools, and try to leave things as "unresolved" when the evidence isn't clear.
Data & privacy practices
Infrastructure & logs
Privacy
This site is run independently by one person and makes no money. There are no tracking scripts, analytics, or ads.
Log minimization: Hosting/CDN providers (e.g., Cloudflare) may log basic routing data (IP address, user agent, timestamp, referrer) for operations, security, and DDoS mitigation.
Submissions (email / PGP)
Submissions
If you email me (plaintext or PGP): I receive your email address, message content, and any attachments you choose to include. Please do not send passwords, private keys, illegal content, or anything classified/restricted.
Publication policy: I do not publish private submissions, names, or identifying details. If I ever want to quote or publish any part of a private submission, I will ask for explicit written permission first.
Retention, deletion requests
Strict
Default retention (strict): I aim to delete incoming messages and attachments after handling, typically within 30 days. If a thread needs follow-up, I may retain it a bit longer until resolved.
Deletion requests: Send an email from the same address (or a signed PGP message) with subject DELETE and a short identifier (date and excerpt). I'll delete the message from my end as quickly as I can.
Note: I cannot control provider-side logs, backups, or third-party mail systems.
Removal / correction requests
Admin
If a record on this site violates your privacy, misidentifies you or your organization, or requires a factual correction from an involved party, contact me via the secure uplink.
Include: page URL (optional #section), what to change/remove, and why (privacy, safety, error, rights). I review quickly. I default to outright removal to avoid conflict, but will gladly apply exact corrections if provided with an accurate, citable alternative by the referenced party.
Subject: CORRECTION (for FAQ/resources/archive/handbook errors).
Press/legal/official: include affiliation + exact request.
Note: The CORRECTION tag is reserved for direct stakeholders, privacy, safety, and rights issues. General feedback, thoughts, or differing opinions are always welcome — just use a standard subject line. Critical reading is the foundation of this project, and I fully encourage you to apply it to this node as well.
Secure uplink with contact e-mail live on: Send.
Warrant canary (integrity check)
PGP-signed statement
Integrity
Why this exists: As an independent, personal project, alien-contact.me is not legally required to provide this. This warrant canary is a voluntary integrity check to maintain transparency and demonstrate that the node remains independent of any external influence or gag orders.
If this signature is outdated (expected update window: 1st–5th of each month), missing, or fails verification, you should assume this node has been compromised.
Status: Valid (April 1, 2026)
Verify using the Node-1 Public Key
pubkey.asc:
gpg --verify canary.txt.asc
Operational Integrity & Verification
Architecture: This node runs on a static, zero-dependency setup. No third-party scripts, analytics, or external asset loads. To prevent tampering or Man-in-the-Middle (MITM) attacks, active payloads are cryptographically secured using Subresource Integrity (SRI) and detached PGP signatures.
Asset:
/boot.jsSRI:
sha384-WtPfLmKbiqRiLUxlW3ySlVNVEPRnKW2lBxq4VM8NB2jZJjBKtoSq+HQ/gTeroQS5Sig: boot.js.asc
Asset:
/script.jsSRI:
sha384-tno/0nTeixdmnBOOmniDtpSmRmd1xRgS2rlLsOyxtOKeKGjLFw54h3w43f2oCUduSig: script.js.asc
Asset:
/style.cssSRI:
sha384-Lc8zZ8Ks5eizCn+U6Az+YeBqNHydfvmyQvV2/DJKLmpHS6mMp5TOxi4f8dMJ0XmOSig: style.css.asc
Verify it yourself: Grab the Node-1
pubkey.asc
(Fingerprint:
C7D7 AD66 228D 6361 BFE6 D200 8F0E E351 1204 424B). You can run a quick local check (gpg --verify script.js.asc script.js) to make sure the files haven't been tampered with by the host.
Hosting logs: While this node uses zero tracking, the infrastructure provider (Cloudflare) logs basic routing data (IP, User Agent, Timestamp) strictly for DDoS mitigation and TLS termination.
Secure uplink
You can use this to send me files, ask for a correction, or just get in touch. Please don't send classified, illegal, or doxxing material.
Use Send for the email reveal + optional PGP key.
Cover infrastructure costs
alien-contact.me is independently operated and self-funded. If you find it useful and want to help cover the infrastructure costs, that option is here.