SHORT MEMORY. On purpose.

Do I Trust This is operated by Rebellion Systems. This page explains what we receive when you use the service, how long we keep it, who processes it, and how to ask us to delete it. It is written for the current stage of the product, which is a preview with a small invitation-only pilot. We will update it before any wider launch.

Who we are

Rebellion Systems is the controller for the data described here. Contact for privacy matters: privacy@rebellion.systems.

This website

The site at doitrustthis.com is a static preview hosted on Cloudflare Pages. It sets no cookies of its own, runs no analytics or advertising scripts, and loads fonts and scripts only from this domain. The example message box is read-only and uploads are disabled: nothing you type here is sent anywhere. Cloudflare, as our hosting provider, processes connection data such as IP addresses to serve and protect the site under its own terms.

Instagram pilot

During the pilot we operate an Instagram professional account connected to Meta's Instagram API. When you @mention that account in a comment or caption on a public post, Meta sends us a notification and we may retrieve, through the official API only, the following:

the text and timestamp of the comment that mentioned us, and its identifier;
the post's caption, media type, media URL, timestamp and the username of the account that published it;
the username of the account that mentioned us, where Meta includes it.

We use this to answer the mention with a single public comment. We never send direct messages unless you have messaged our account first, and we do not contact the author of the post. Mentions on posts by private accounts never reach us. We do not read your profile, followers, messages or any content beyond the post you tagged us on.

We do not use Instagram content to train models, and we do not sell or share it. Our replies describe evidence about a specific item, not people.

What we store, and for how long

Content we retrieve for a check, and raw results from analysis providers24 hours

The short report or reply we produced7 days

Redacted operational logs: identifiers, timings, error codes30 days

Operational logs never contain message bodies, images or access tokens. Encrypted backups of our database are kept for at most 7 days, and deletion requests are replayed after any restore.

Processors

Cloudflare: hosting and network protection for this website.
Meta Platforms: the Instagram API through which mentions reach us and replies are posted, under Meta's own terms.
Hetzner: servers in the European Union that run the checking service.

Before live intake opens beyond the pilot, we will list here every additional provider that analyses submitted content, such as text classification or image analysis, together with its retention terms and region.

Your rights

If you are in the EU or UK you can ask for access to the data we hold about you, for correction, for deletion, or object to processing. Because we keep very little for very short periods, the fastest route to deletion is usually the retention schedule above. To ask us directly, write to privacy@rebellion.systems with the Instagram username you used and, if possible, a link to the post. We answer within 30 days. You can also complain to your local data protection authority.

To stop receiving replies from our account, delete your mention or reply to our comment with the word stop. We will not answer further mentions from that account.

Our replies are automated checks of the evidence in front of us. They are not legal, financial or security advice, and they are not statements about any person's character.

Changes

We will revise this page as the product changes, and note the effective date at the top. Material changes to what we collect or how long we keep it will be published before they take effect.