A handle is a record, not an account.

Greybook holds nothing that could identify you. That is a schema-level fact, not a promise in a policy document.

What is collected

A handle and a passphrase. That is the complete list. The passphrase is stored as a scrypt hash with a per-secret salt; the one-time recovery code is stored the same way and shown exactly once.

What is not collected

No address to write to. No real name. No employer. No phone number. No third-party sign-in. There are no columns for any of them anywhere in the database, and continuous integration fails the build if one is ever added.

What this costs you

There is no account recovery. There is nowhere to send a reset and no support desk that can vouch for you, because there is nothing to vouch against. Lose both your passphrase and your recovery code and the handle is gone permanently.

Addresses and rate limiting

Greybook does not log network addresses against handles. Rate limiting uses a keyed hash of the address under a salt that rotates every twenty-four hours; the previous day’s salt is deleted, which makes yesterday’s keys permanently unmatchable against today’s. Rate-limit rows are never joined to a handle.

Two posting tiers

Posting with a handle accumulates a record and carries full weight. Posting with no handle at all is available for rumours, where the post may be career-risky — it carries the lowest weight, builds no record, and leaves no trail. Every rumour card states which of the two it is, in plain words.

Reading and voting require nothing

No handle is needed to read Greybook or to confirm and contradict what you find here. Anonymous signals are rate-limited and counted in their own tier, displayed separately from signals carrying a handle. The feedback loop is the mechanism the product is made of; gating it would break it.

Before you file a cost or a failure

Anything describing an incident or an employer’s spend defaults to anonymous, and every submission is scanned for company names, host and bucket names, internal URLs, and dates precise enough to correlate with a public outage. Take the scrubbing checklist seriously — Greybook can protect your identity, but it cannot un-publish what you typed into the body.