Your information,
your choice.

This notice describes the behavior implemented in this prototype. NASJ should complete a legal and organizational review, including operator contact details and a formal retention policy, before public deployment.

Why the forms collect data

The First Thread form collects contact and participation details to review private alpha applications and contact selected testers. The craft-community form separately gathers information from people and organizations in the artisanal ecosystem for community review and optional outreach.

How data is handled

Submitted information is saved in a private Neon PostgreSQL database. These forms do not publish your information, create platform accounts or automatically grant access. Rate limiting uses a keyed hash of the sending address, not a raw IP record.

Consent and control

Both forms require consent for their stated processing purposes. The craft-community form separately offers an optional collaboration-contact preference. Before going live, NASJ must publish a contact channel for requesting access, correction or deletion, and define a retention and deletion process.

Security

Database credentials are server-side only. Application forms validate input and apply request rate limits. NASJ should complete access controls, monitoring, operational backups and its privacy/legal review before accepting live submissions.