Privacy notice · October 14, 2026

Your details.
Your choices.

Public resources stay open. Participation stays private.

About this signup

The interest form checks availability before accepting details. When you register, your request is saved privately and a confirmation and management link is sent to your email address. Your selected interests stay pending until you explicitly confirm them. If storage or email is unavailable, the form explains what happened.

Locker Room Talk is an emerging project founded by Nick Madison. It is not an incident-reporting channel, emergency service, or confidential support service. Please do not submit sensitive personal narratives or identifying incident details.

What the form uses

We ask for an email address, your selected purposes, confirmation that you are 18 or older, and permission to use your details for those purposes. First name and role are optional. A professional organization name is optional for contribution or pilot interest. We do not ask for a birth date, incident account, survivor status, files, or a team roster.

The private record holds your submitted profile and purposes, the source page (home or program), timestamps, permission-text version, confirmation state, and a simple working status. It does not include a full referring URL. Adults only may register; everyone can read the public pages.

Separate permissions

Occasional updates, a contribution conversation, and a future pilot conversation are separate choices. None is preselected. Choosing a conversation does not subscribe you to updates. Email updates stay inactive until you confirm your address using the emailed link. We also ask you to confirm before a requested conversation is followed up.

A repeat submission cannot change an existing person’s permissions. The private management link lets the address holder review and change their choices. We do not sell this list or publish your participation.

Who processes the data

Vercel hosts this website. The signup uses Neon for private PostgreSQL storage and Resend for transactional confirmation and management emails. These services process data on the project’s behalf; “private” does not mean that no service provider processes it or that a submission is legally privileged. Email sent to our public contact address is forwarded by Squarespace’s email service to the project operator’s Microsoft inbox.

Access is limited to the project operator and authorized providers. The site has no public contact directory, visitor accounts, or client-accessible contact table. It does not send signup details to analytics. This release adds no advertising or analytics cookies.

Read the providers’ notices: Vercel, Neon, and Resend. External resources have their own practices.

Spam controls and technical data

A hidden bot field, signed form timing check, request-size limits, and shared database rate limits help protect signup. Rate limits use short-lived keyed hashes of an address or network identifier; the application does not store raw IP addresses in the contact list. Rate-limit entries expire within 24 hours and are removed during maintenance. Service providers may process network and request metadata to operate and secure their services.

Private email links expire after 48 hours. Only a hash of each access token is stored in the database. The site removes the token from the browser address bar after opening the management page. No signup details or access tokens are intentionally written to application logs.

Withdrawal and deletion

Use Manage your interest to request a private email link. You can change purposes, unsubscribe from updates while keeping requested conversations, or delete the entire record. Deletion removes the active interest record and associated access links. Temporary security records expire separately; provider backups and email delivery records follow their configured retention.

For privacy questions or if you lose access to the registered address, contact Nick Madison at hello@lockerroomtalk.org. Identity must be checked before altering a record. Do not send incident information or identification documents through this website or to this inbox.

Retention

The maintenance procedure removes unconfirmed registrations after 30 days, closed records after 90 days, and other records after 24 months without an update. The operator must run maintenance at least weekly once signup opens. Restricted exports are for the selected purposes only and must be deleted after use, within 30 days.

Neon’s configured database recovery history covers six hours, so a recently deleted record can remain in recovery history during that window. Resend’s current Free plan retains email data for 30 days; this includes the transactional message containing your private link, which expires after 48 hours. Deleting your signup record does not delete copies in your own inbox or immediately remove provider delivery records. Provider security, billing, and legal records follow their privacy notices.