Voting

Your first vote sets one cookie, mkdir_voter: a random ID, signed so it cannot be forged, kept for a year. It lets one vote per directory count and shows your own votes on the list, so it is strictly necessary and needs no consent. To cap how many new voters one network can create in a day, a keyed hash of your network, which changes every day and cannot be turned back into an address, is stored with the ID.

Suggesting a directory

A suggestion stores the address you entered and the country Cloudflare reports for the request, never your IP address. The suggested site's public homepage is read once by an automated review on Cloudflare Workers AI, and the suggestion is emailed to the owner.

Spam and bot protection

Votes and suggestions pass Cloudflare Turnstile, which checks the browser without a puzzle, and a rate limit keyed on your network for the length of the check. Neither is stored by mkdir.

Hosting and analytics

The site runs on Cloudflare, whose request logs, including IP address and browser, are kept for a few days to keep it running and safe. Visits are counted with Umami, which sets no cookies and reports only aggregate numbers.

Your rights

You can ask what is held about you, or to have it deleted, at hello@edoardolunardi.dev. Clearing the cookie removes the link between you and your votes.