Privacy & community guidelines
An unofficial student space
FISTHub is independently operated. It is not owned, endorsed or administered by the university, and it has no access to university academic systems. Contact admin@fisthub.co.
Confessions and identity
Confession submissions do not require login. Application confession records contain no student account reference, name field, email, phone, IP address or device fingerprint. The words you submit can still identify you or someone else, especially on a small campus. Remove personal details and identifying descriptions.
Absolute anonymity is not promised. Hosting, CDN, proxy, DNS, security and network providers may retain access logs. Operators must review those services before advertising stronger privacy guarantees. Logged-in academic activity uses authenticated sessions, which can contain security metadata and is separate from confession records.
Private receipts
A private receipt proves control of a submission and enables author replies. Only its hash is stored. Save it securely; anyone with the receipt can act as the author. Lost receipts cannot be recovered through a student account. Do not share them publicly.
Human moderation comes first
Posts and comments remain private until a moderator approves them. Harassment, threats, doxxing, false personal accusations, contact details and descriptions that identify other students are not allowed. Reports are reviewed by moderators. Automated filters are a first pass and cannot replace contextual human review.
AI, files and external services
Your prompts, relevant conversation history, selected extracted uploads, saved formatting preferences and cover-page information may be sent to the configured AI provider to fulfill your request. Provider retention depends on the operator’s account and terms. Do not upload sensitive information or files you are not permitted to share. API keys stay on the server.
Uploaded instructions are treated as untrusted evidence, not authority to control privileged tools. AI-generated drafts may contain errors. Check every citation and factual statement, follow your course’s AI policy, and never present invented results as completed work. Writing refinement makes no promise about AI detector outcomes.
Retention and deletion
Temporary processing folders are deleted after each job. Original uploads and terminal job records expire after the configured retention period, seven days by default. Chats, generated files and their versions stay in your workspace until deleted or your account is removed. Backups may retain prior data until the backup retention period expires. Anonymous submissions cannot be found through your account; keep your receipt and contact the operator for removal requests.
Security and abuse controls
Uploads must pass file-signature validation and malware scanning. Private downloads require authorization, with short-lived signed URLs where enabled. Anonymous submissions use a shared rate limit without IP or fingerprint storage; reaction counts are informal and do not represent verified unique people.
Operator deployment requirements
Before public launch, operators must configure TLS, provider credentials, private object storage, backups and recovery, proxy upload limits, retention, appropriate log settings and moderation coverage. This page describes application behavior and cannot certify third-party infrastructure.