# Privacy Hardening Status

Website analytics now has a separate consent and measurement specification in [website-analytics.md](website-analytics.md). Optional first-party statistics require consent; Google integration remains disabled until account setup and a separate visitor choice. An owner browser exclusion blocks both destinations. The analytics implementation report records actual deployment verification and remaining hosting requirements.

The website does not collect public participant contact profiles. Its homepage contains a narrow, explicit email-only mailing-list join that opens the visitor's own email application; the static page does not transmit or store the address. Public media metadata stripping remains an operational publication requirement and must not be represented as automatically enforced until it is wired into the upload/deploy pipeline.