What we know
about you
Written so that a reporter, a reader, or an official with a court order all get the same answer.
When you submit a report
We store the report itself: department, amount, city and state, the role of the person who asked, what happened, whether you paid or refused, and the time it was submitted. That is the entire row. There is no name, no email, no account, no IP address, no device identifier and no cookie attached to a report — nothing in our database says who sent it.
Before it is saved, the text you typed is run through automated masking that replaces anything that looks like a person’s name, phone number, email, Aadhaar/PAN number, vehicle plate, UPI id or link with [name], [phone], [id], [email] or [link]. You see the masked version on the review step before you press submit. The unmasked text is never written to disk.
The one thing we keep for an hour
To stop one person flooding the site, we allow five reports per hour per connection. For that we store a one-way hash of your connection address, salted with a secret and with the current date, in a separate rate-limit table. Rows older than one hour are deleted on every new write. Because the hash rotates daily and the salt is secret, it cannot be turned back into an address, and after the day ends it cannot even be checked against one. It is never linked to a report.
When you vote Helpful or Fake
We set a random token in a cookie so you can’t vote twice on the same report. We store a hash of that token next to your votes. It contains nothing about you and is not linked to any report you may have submitted.
What we don’t do
- No analytics, advertising or tracking scripts of any kind.
- No server-side request logs kept by us (Cloudflare’s Workers logging is switched off).
- No accounts, no email list, no third-party sign-in.
What sits outside our control
The site runs on Cloudflare (servers and database in the United States). Like any network provider, Cloudflare sees the address of every connection for as long as its own systems keep such records; that is governed by Cloudflare’s policies, not ours, and we cannot see or delete it. If that matters to you, use a VPN or Tor when you submit — the site works fine with either.
If a government or court asks us for data
We comply with lawful orders. What we can hand over is limited to what exists, and for a report that is the published row you can already see on the site. We hold no record of who submitted any report, so we cannot identify a reporter, and we will say so in writing to whoever asks. We will publish, on this page, a running count of legal requests received and what was provided. Legal notices and all other correspondence: contact@bribed.fyi.
Legal requests received to date: 0. Reporter identities disclosed: 0 (none exist to disclose). Last updated 18 August 2026.
The law on paying a bribe
Under India’s Prevention of Corruption Act (Section 8, as amended in 2018), giving a bribe is itself an offence — except when you were compelled to pay and you report it to law enforcement within seven days. Posting here is not that report. If you were forced to pay, please also file with your state Anti-Corruption Bureau, the Central Vigilance Commission (cvc.gov.in, portal or 1964 helpline) or the Lokayukta; that protects you and creates a record the authorities must act on. bribed.fyi exists to make the pattern public; the official complaint is what triggers action.