Privacy Policy: Site 19 Archive (Android app)
Last updated: 20 October 2026
Developer / contact: Kostas Stathopoulos, [email protected]
What this app is
Site 19 Archive is a free companion app for the fictional "classified archive" website blacksite.wiki. All documents, agencies and events in it are fiction. The app lets you read the archive, search it, browse folders and play attached media.
Using the app as a guest
You can browse public records without an account. In this mode the app sends requests to blacksite.wiki to fetch the lists and public articles. The app does not collect your name, email or any personal profile.
Signing in
If you choose to sign in, you enter the username (or email) and password of your blacksite.wiki account. They are sent over HTTPS to blacksite.wiki and nowhere else. The app does not keep your password. After sign-in it stores a login token on your device, in Android's encrypted storage (Keystore-backed), so you stay signed in for up to 30 days. Signing out deletes the token on your device and revokes it on the server. Accounts are created only by the site's administrator after an access request on the website.
Information the app handles
| Data | Why | Where it goes |
|---|---|---|
| Username/email and password (only when you sign in) | To sign you in | Sent to blacksite.wiki over HTTPS, not stored in the app |
| Login token | To keep you signed in and decide which records you may read | Stored encrypted on your device; also known to blacksite.wiki |
| Articles, search text, folder choices | To show you records you are cleared to read | Sent to / received from blacksite.wiki |
| Media files (video, audio, images, PDFs) | To play or show attachments | Downloaded from blacksite.wiki into the app's private cache and deleted when you leave the article or sign out |
| Standard connection data (IP address, device model name used as a token label, app user agent) | Security, abuse prevention and rate limiting | Processed by blacksite.wiki and its hosting/Cloudflare, and recorded in the site's access log |
The server also keeps a security log of access events (for example sign-ins, denied access attempts and media playback) tied to your account and IP address. This log is used only to run and protect the site.
What the app does not do
- It contains no advertising and no third-party analytics or tracking SDKs.
- It does not sell or share your data with third parties for advertising or marketing.
- It does not read your contacts, location, photos, microphone or camera.
- It requests only the Android permissions needed to use the network (INTERNET, ACCESS_NETWORK_STATE).
Service providers
blacksite.wiki is served through Cloudflare, which may process connection data (such as IP addresses) to deliver and protect the site. See Cloudflare's own privacy policy for details.
Retention and deletion
- On your device: sign out to remove the login token, or clear the app's data or uninstall the app to remove everything.
- On the server: to ask for your account and its data to be deleted, contact [email protected]. Access logs are deleted automatically after a limited period.
Children
The app is not directed at children under 13 and is intended for adults.
Security
All traffic uses HTTPS. The login token is kept in encrypted storage, and downloaded media is kept only in the app's private cache. No method of transmission or storage is perfectly secure.
Changes to this policy
If this policy changes, the new version will be published at this address with an updated date.
Contact
Kostas Stathopoulos · [email protected]