Anonymous by default

The strongest privacy statement a platform can make is about the people it never identifies at all. On CTXR, the most basic way to use a space — the default, the one nearly everyone is on — asks for nothing. There are three ways to engage, and they’re worth seeing from the trust side, because they ask for steadily more identity, starting from none.

The most basic use is anonymous

A space is a normal website: a visitor opens a link and reads it. No account, no sign-up, no cookie banner — the platform sets no tracking cookies and profiles no one. A visitor can go further and install the space as an app and even receive location-aware or nearby prompts, and all of that stays anonymous too: those capabilities are granted to the device, never to an account, and nothing about the person is stored on a server. The how is in Reach; the point here is that the floor is zero data.

anonymous   visit or install the app, get nearby prompts   — nothing stored, nobody identified
account     follow and collect across spaces                — one email, no password
space       publish a site of your own                      — an owner identity

Identity only when it buys something

You climb the ladder only when you want what the next rung offers, and each rung asks for the least it can.

An account appears the moment you want to keep things across spaces — follow content, collect it into folders. It’s keyed to an email and signed in with a one-time code; there’s no password to store or leak, and the platform holds little more than that address and a display name. A space appears only when you want to publish. Most people never go past the first rung; many never past the second.

Why this is a trust property, not a feature

Because the default is anonymous and identity is minimal even above it, there is very little personal data for the platform to hold, lose, or be asked to hand over. The data-minimisation isn’t a policy bolted on — it’s the shape of the product: a visitor leaves no trace, an account is an email, and device capabilities never attach to a person. For the data that does exist once someone signs in or publishes, the controller/processor split and your obligations are set out in Privacy and GDPR; the step-by-step of each level lives in Ways to use CTXR.