What this is
Purple Askepott is an independent initiative that shows women and men living with abuse where to get help. We are not an emergency service, and we give no legal or medical advice. We point you to the people who do.
Privacy
- No tracking and no analytics. The public pages set no cookies.
- Nothing loads from other sites — fonts and images are served by us.
- When you follow a link to a helpline, we do not tell them where you came from.
- Ask Askepott sends your question, without your IP address, to an AI model: Claude Haiku from Anthropic, run on Amazon Bedrock in the EU. Nothing you write is stored — not by us, not by Amazon. To stop misuse, we count questions per visitor with a one-way code made from your IP address, never the address itself. That count is deleted after an hour.
- On our own YouTube, Instagram and Bluesky accounts, we read public comments, to learn what people ask and to answer anyone who needs help. Before a comment is kept, we remove @handles, phone numbers, links, e-mail and street addresses, and the account that wrote it is replaced with a one-way code. What we keep is deleted after 28 days. The only thing we keep longer is the questions people ask, in our own words: never anyone's own words, and never who wrote them.
- Membership (the member pages) needs only an email address and a tick to say you are 18 or over. The address is stored encrypted, with a one-way code to find your account, and is used only to send your sign-in codes and, if you choose it, the weekly update. It is never shown, not to our staff and not on your own page. A sign-in code is stored only as a one-way code and stops working after 10 minutes. To stop misuse, we count tries the same way as for Ask Askepott, and also count sign-in tries for each address, as a one-way code, for up to 24 hours. From your member page you can download everything in your account, or delete your account at once. An account nobody signs in to for two years is deleted. When an account is deleted, we keep only its random account number and the date, for 13 months, so that it is deleted again if we ever have to restore a backup. To ask for a copy of what we keep, or to have your account deleted without signing in, write to the address under Contact below; we answer within 30 days.
- The weekly update is off until you choose it. We keep only your choice (off, a short note, or the whole update), not what you read. Each email is logged as sent for 60 days so nobody gets it twice, and if it cannot be delivered we pause it. Every email has a link to stop it. People write the update from what is already public, on this site and our social accounts; nothing in it is about you.
- My notebook (on the member pages) is locked in your browser with a passphrase only you know, before anything is sent. We keep only that locked text, which we cannot open, the dates it was made, opened and saved, and a count of tries that opened nothing since you last opened it; the last two saved versions are kept. We cannot reset the passphrase. A notebook nobody opens for 36 months is deleted, and deleting your account deletes it at once.
- Partner accounts (for organisations that work with us, made by us on request) hold a username, the organisation's name, a passphrase stored only as a one-way code, and the day the account last signed in. An account that has been switched off for 12 months is deleted.
- Cookies on the member and partner pages: one cookie, only to keep you signed in. It ends when you close the browser, or after 30 days if you ticked "keep me signed in". You are signed out after 30 minutes without activity (14 days if you chose to stay signed in), and Quick Exit signs you out too. Two things outlive a deleted account for a while: the mail server's delivery log (the address and the time, about five weeks) and encrypted backups of the database (up to about a year).
- The server keeps ordinary technical access logs (IP address, time, page, the page you came from, and your browser's name and version). They are deleted automatically after about six weeks. Visits to the member and partner pages are not written to the server's access log.
Contact
Purple Askepott is run by Blue Note Logic Inc., which decides how this data is used. You can also complain to the data protection authority where you live: Datatilsynet in Norway, the Data Protection Commission in Ireland, or the ICO in the UK.