Privacy
How PSP handles information generated by public search and information you choose to submit through the reporting process.
Public search
PSP keeps its application-level public-search logging privacy-minimised. The log records operational information such as the event time, type and length of the query, number of results and request status. It does not intentionally store the raw search term, SAPS BID, searched name, IP address or user-agent in that application log.
For rate limiting, the connection address is used only to create a one-way bucket identifier in short-lived runtime storage. Forwarded-IP headers are not used for this control. Hosting, network, web-server or security infrastructure may maintain separate technical logs outside PSP's application-level search log.
Information submitted in a report
If you report a public result, PSP stores the SAPS BID, relevant internal record and source identifiers, the source-version hash, the report category, your message, the submission time and—only if you choose to provide it—your contact email address.
The report record does not intentionally store your IP address or user-agent. Your report text and optional contact email are available to authorized reviewers and are not published in public search.
Only provide what is necessary
Do not include passwords, identity-document numbers, bank information, medical information or unrelated personal information in a report. Use the official source for the underlying SAPS information and provide PSP only with the information needed to explain the issue.