The Rules.

Tell the truth. Show the limits.

Review your own experience accurately. Identify a program, timeline, reward terms, and outcome only when you can support them. A company listing alone is not an allegation, endorsement, or verified affiliation. Staff approves complete reviews and case summaries before publication; replies do not create stars or change ratings.

Factual AI-assisted writing is allowed. AI-generated, fabricated, falsified, or deceptively altered evidence is not. Do not invent photos, screenshots, messages, payment receipts, transactions, conversations, authors, dates, or accusations. Do not make false accusations. Staff evaluates the underlying facts and context; writing style or an AI score alone never establishes a violation.

Protect privacy without changing the story.

Disclosed privacy redaction is allowed when it preserves meaning. Say what was redacted and why. Do not hide context that changes a reader’s understanding, expose someone else’s private information, or dox anyone.

Keep technical exploits out.

No PoCs, exploit code, reproduction steps, vulnerability details, or links to technical proofs, including in private administrative context. Describe payout, scope, communication, and process disputes without publishing a vulnerability. Review, case, and reply attachments are not accepted, even privately; there is no screenshot-upload channel in the current intake.

Profile images, not file sharing.

Every verified member with two-factor authentication may upload a public profile image from their dashboard. JPEG, PNG, and WebP images up to 2 MB (2 MiB) are accepted; images are checked, cropped to a square, and re-encoded. No NSFW material, racist imagery, impersonation, or private information. No SVGs, documents, archives, or scripts. The only additional upload exception is a dedicated professional sponsorship banner: one reviewed JPEG, PNG, or WebP up to 2 MiB, in a wide 3:1 layout. Replies are limited to 10,000 characters; ordinary member form requests have a 128 KiB limit, with a separate bounded allowance for profile images.

Labs, events, and sponsorships.

Active accounts with verified email and two-factor authentication may submit basic factual event listings for free. Staff reviews every event and substantive edit before publication. Listings are not hosted executable labs or file-sharing spaces. No PoCs, exploit uploads, technical solution writeups, scripts, frames, or member-supplied styling. Ordinary event descriptions have a 10,000-character limit; new descriptions above that limit require a currently qualified professional organizer and allow up to 256 KiB of text in a dedicated 384 KiB form request. These exceptions never expand ordinary reply or case limits.

Approved events, including already approved longer descriptions, remain public after membership expiry unless withdrawn, cancelled, or the account is no longer active and eligible. Membership never buys event approval, reputation, or a different review standard.

Professional organizer review is not an endorsement or a guarantee of event safety. Paid campaigns never buy editorial priority or immunity. Separately paid, time-bound banners appear only on the sponsor’s personal member profile and the shared Community Showcase. Independent approval, current membership, and current trust eligibility remain required; revocation or membership or campaign expiry suspends banner display. No flashing animation, tracking pixels, or third-party ad scripts.

Open discussion, not abuse.

Open-topic conversation belongs in the forum’s General discussion thread. Verified members may reply where the forum permits; new cases go through private staff review. No NSFW content, racism, harassment, threats, or doxxing. Paid membership never grants immunity, priority approval, or a different standard.

Your account. Your responsibility.

Use a persistent mailbox and verify your email. Temporary and disposable email addresses are not accepted, including when changing your email. Persistent privacy-focused providers are welcome. Authenticator-app two-factor authentication is mandatory for every account before member access. Email alone is not a second-factor replacement.

Save your single-use backup codes offline and keep them private. A password reset does not remove or bypass two-factor authentication. We do not provide routine account restoration. Only exceptional circumstances may receive owner review, and restoration is never guaranteed. Losing every second factor may permanently lock you out. Never send staff your password, authenticator secret, or backup codes.

Staff decisions and account bans.

Staff reviews reports and confirms violations before action. Staff-confirmed violations result in a permanent account ban and withdrawal of violating content. A detector, writing style, or AI score alone does not make that decision. An account ban is not a guarantee that every replacement identity can be excluded.

Report content with the relevant page and a concise factual concern. If you believe a decision contains a factual mistake, request review with the specific disputed fact and relevant nontechnical context. Existing restrictions remain in effect during review; no reversal or response deadline is guaranteed.