Privacy & responsible portal use

1. Purpose of the witness portal

The MNWP / COLOR Vault portal is for good-faith witness accounts, whistleblower information and supporting material relevant to independent case review. Its purpose is to preserve information, distinguish firsthand observations from secondhand accounts, overheard conversations, forwarded communications, documents, camera recordings and other digital sources, trace prior reporting, and support careful human investigation.

A submission is an account for review, not a verified finding. This is a private initiative, not a law-enforcement agency, court, emergency service or witness-protection program. It does not create an attorney-client relationship or guarantee representation, investigation, confidentiality or physical safety. Call 911 for an immediate emergency.

2. Registration, updates and donations

Registration requires an email address. Name, self-described category, phone number, country, state or region, and ZIP or postal code are optional. We use these details to send package-access email, maintain registration records and understand geographic interest. Self-described categories help us organize contacts and prepare relevant communications; they do not verify professional status or grant access to witness records or case mailboxes. A phone number does not opt you into texts. Text-update interest is recorded only when you separately request it, with a timestamp and notice version; numbers are not yet verified and SMS delivery is not active. Phone verification, withdrawal/opt-out controls and final delivery review are required before text updates are activated. We do not publish phone numbers. Project-update emails require a separate opt-in; registration, donations and witness intake do not automatically provide that permission.

Registration records include a registration identifier, timestamp, stated update preference and notice version. Email-processing records include provider message identifiers and timestamps; provider acceptance does not itself prove inbox delivery. Geographic reports are intended to be aggregate, with care to avoid identifying individuals in small groups. We do not publish registrant names or email addresses.

Stripe processes checkout and payment details. Project records may include contribution amount, initiative, frequency, payment reference and timestamp for administration, reconciliation and acknowledgments. We do not receive full payment-card numbers through the website. Donations are optional and do not establish agreement with any investigative conclusion.

3. Planned witness records and access protection

The portal begins with a region and an explicitly public intake case. Each case uses a versioned question set. You may select both witness and whistleblower descriptions. A personal account of being with Nolan after 4:31 p.m. on July 4, 2026 is a separate, unverified intake description, not an application or qualification for a proposed reward. Guided answers, the selected case and questionnaire version are encrypted with the statement. They are not treated as verified findings. Before submission, you can review and edit your answers and selected files.

Active use can renew the same witness session; approximately fifteen minutes without activity requires passkey sign-in again. A page left open does not by itself renew access. Unsent drafts remain in page memory and may be lost if you refresh or leave. There is no automatic cloud draft save.

MNWP acts as an information bridge. As part of our internal process, source names and contact details are not sent to receiving organizations without express permission. Non-identifying categorical summaries may be shared; case details require recipient-specific authorization. A voice, face, distinctive detail or embedded metadata can identify a source even when a name is withheld.

Optional audio/video statements request device permission only after you choose Start. You review and keep a clip before submission; no live stream is sent to MNWP. Unsubmitted clips remain in page memory and can be lost on refresh or navigation. Submitted files are retained as received without transcoding, encrypted and quarantined for screening. Capture records include available format, browser-reported start/end time, duration and selected audio/video settings. We do not request location or collect device identifiers for recording. All received embedded metadata stays in the preserved file; metadata not supplied by the device cannot be recovered by the portal. Metadata and device clocks are not proof of origin or event time. Returning access uses your passkey; no reusable login key is sent by text.

When enabled, intake will collect witness contact details, the source and substance of the account, prior sharing or reporting, relevant safety preferences, acknowledgments and any supporting files. Original files may contain identifying filenames, device details, dates, locations and other embedded metadata. Restricted reviewers may examine that metadata; it is not assumed accurate.

The staged witness system encrypts statement, contact and file content before storage. Initial setup verifies control of your email and enrolls a device passkey. Returning access uses that passkey with your device PIN, fingerprint or face recognition, without routine email or SMS codes. A passkey verifies control of a credential; it does not establish professional status or guarantee that a device or mailbox has not been compromised. Reviewer access is separate. Dated supplements preserve the original account. The registration database has separate access controls; the additional witness-content encryption claim does not describe every website record.

Encryption and authentication reduce risk but do not guarantee that a system cannot be attacked or that a witness cannot be identified from the account itself. Do not send witness statements or sensitive evidence to the general inquiry email.

4. Source identity, recipient permission and lawful referrals

You may ask MNWP to withhold your identity from outside recipients. This is not an anonymous submission to MNWP: your verified email and submitted contact details remain available to the specifically authorized source custodian. The account, evidence or embedded metadata may still identify you indirectly. MNWP cannot offer legal source privilege or a guarantee against compelled disclosure.

For each proposed outside recipient, you receive a separate request naming the organization, person, purpose and requested material. Identity sharing is a separate choice, off by default. A permission request does not send any material. Before release, a person reviews the copy and selects the exact authorized destination. You can revoke future access through the portal; material already downloaded or transferred cannot reliably be recalled. Original files remain withheld from recipients when identity permission is absent; a separately reviewed redacted copy is required.

Witness privacy is a priority. MNWP coordinates intake, preservation and review; it does not exercise law-enforcement powers, decide criminal liability or provide legal representation through this form.

Witness information is intended for specifically authorized reviewers, not public posting. We will not voluntarily publish a witness’s statement, identity, contact details or supporting material without that witness’s express permission. We will not voluntarily disclose identifying information outside the authorized review team without express permission identifying the recipient and purpose, except where disclosure is legally required.

Witness statements and supporting evidence may be referred to appropriate lawful investigative authorities through an approved process, subject to that permission requirement and applicable legal obligations. Legal process may require preservation or disclosure. MNWP cannot promise absolute confidentiality or privilege.

Before an authorized transfer, we will communicate that witness privacy is a priority and seek appropriate recipient safeguards. Once information is transferred to another agency or aligned organization, its handling is subject to that recipient’s practices and legal obligations. MNWP cannot guarantee downstream confidentiality, retention, use or further disclosure. The proposed recipient, purpose and known limitations must be explained when seeking the witness’s permission; preparing a report does not itself authorize an outside transfer.

Discussions and approval are pending for any proposed NAACP General Counsel or other partner involvement. No affiliation, recipient access, acceptance of evidence or transfer agreement is represented as established.

Information necessary to address threats, suspected attacks, witness intimidation or other unlawful conduct may be preserved and referred to appropriate authorities where permitted or required by law. Referrals are reviewed by a person; no automated accusation or report to authorities is enabled.

5. Truthful accounts and prohibited conduct

Do not knowingly provide a false witness account or fabricated evidence. Describe what you know truthfully to the best of your knowledge and recollection. Distinguish observation from inference, identify uncertainty and disclose material edits to evidence. Good-faith mistakes, incomplete recollection and honest corrections are not treated as deliberate deception.

The following conduct is prohibited:

• Impersonating a witness, claiming someone else’s account, or probing the portal to identify confidential witnesses.
• Threatening, intimidating, coercing, harassing or retaliating against witnesses, reviewers, MNWP, COLOR or their affiliates.
• Attempting to influence, suppress, alter, fabricate or destroy a witness account or supporting evidence.
• Bypassing authentication, accessing records without authorization, uploading malicious files, exploiting the system or disrupting its availability.
• Using the portal for knowingly false accusations, unlawful disclosures, spam or unrelated sensitive information.

Credible threats, suspected witness tampering and apparent unlawful attacks will be taken seriously, preserved and reported to appropriate authorities for assessment. An unsuccessful login or a recorded network address alone does not establish wrongdoing. Lawful criticism, protected opinion and good-faith reporting remain welcome.

Use must comply with applicable local, state and federal laws and regulations. The facts and relevant jurisdiction determine which laws apply; a private intake submission is not automatically sworn testimony or a federal proceeding. Authorities determine whether a violation occurred and what action is warranted.

6. Security records, cookies and service providers

Hosting and delivery providers may process ordinary network and service logs. Registration uses rate limiting to reduce abuse. Witness-security records include attempted email, timestamp, verification outcome, network address and available browser or language information, with restricted access and encrypted identifying fields. They do not establish a person’s identity or physical address. Verification codes, private passkey material and session secrets must not be included in those audit records.

Protected sessions use necessary security cookies when enabled. The portal does not add advertising trackers. Cloudflare supplies hosting and storage, Resend supplies email delivery, and Stripe supplies checkout. External package, Instagram and other third-party links are governed by those services’ own policies. We do not sell witness or registration information.

7. Retention, corrections and requests

Registration, contribution and security records are retained for their stated operational purposes and applicable legal obligations. Source accounts, supplements, consent decisions and original evidence are preserved while a case is active or a preservation duty applies. No automatic deletion of evidence is enabled. Retention beyond those purposes and any deletion request require human review; this staged system does not promise a fixed deletion date. Records may need to be retained for legal process, a security investigation or a preservation requirement.

For a privacy question, registration correction, update opt-out or deletion request, contact colorinitiative@gmail.com. Send only the minimum information needed to describe the request; do not email witness testimony, identification documents or sensitive files. We may need to verify control of an account before acting. Requests are reviewed subject to applicable law and preservation obligations. A witness correction will be documented as a supplement rather than silently rewriting the original.

Material changes to collection, disclosure or access practices will be reflected in an updated notice and, where appropriate, renewed permission. Witness intake remains closed until its required services and launch controls have been verified.

8. Optional public release review

The proposed public-accountability response form is separate from witness intake, registration and case mailboxes. When enabled, it records your selected answers, optional self-reported perspective, optional comments, question version and response time. Comments and any separately consented results-notice email are encrypted. The response record does not store your raw IP or a device fingerprint; temporary abuse-prevention and provider security logs may still process network information.

Results are from voluntary, self-selected responses and are not a representative public-opinion poll. Professional categories are not independently credential-verified. Published results require editorial review and aggregate reporting with small-cell protection. Optional comments are private unless you separately permit consideration of an anonymized excerpt; identifying details may still require redaction. Do not submit evidence, witness statements or private allegations in this form.

The optional results-only email signup requires verification and does not enroll you in marketing or grant access to a case. You may cancel it during the response session or contact MNWP with a later privacy request. No public responses or results notices are enabled in the current pre-release draft. The DA video embed connects to Facebook only when you choose to load it; Facebook applies its own policies. Answers and email are not included in that request.