Privacy, provenance, and corrections

What the archive contains

The Ferris family corpus consolidates material gathered from public records, historical publications, memorial databases, genealogical sources, links, notes, and family research. It can include information about living people and can preserve conflicting or incomplete claims.

How access works

The public-facing conversation requires a verified account. Visitors can search the complete indexed corpus and receive concise source excerpts. Automated bulk extraction and unrestricted corpus downloads are not provided.

Corrections and removal concerns

A monitored correction channel is not open yet, and no address is published for one. That is a gap, and it is stated here rather than left for someone to discover: a living person named in the corpus currently has no route on this site to ask for a correction. When the channel opens it will ask a request to identify the exact person, statement, and supporting source; the stewardship team will preserve an audit trail and may correct, qualify, restrict, or remove material after review. Until then, nothing about this page should be read as an active review process.

Generated answers

The model is instructed to answer from retrieved passages, preserve uncertainty, and cite its evidence. It can still make mistakes. Citations—not fluency—are the basis for evaluating an answer.

Film-development interest

The movie page collects non-binding expressions of interest for direct follow-up. A submission can include a name, email address, participation preference, planning range, organization, role, and note. It accepts no payment. The service retains a protected network hash for abuse prevention, never the raw network address, and schedules submissions for deletion 24 months after the most recent submission.

Film updates and consent

Consent to direct follow-up is required to submit film interest. The optional film-update choice is separate and is never inferred from that consent. No bulk updates will be sent until a mailing system with a working unsubscribe process is established. A person can request correction or removal by replying to the acknowledgement or a direct follow-up message.

Site measurement

If a dedicated Google Analytics 4 measurement ID is configured, the public marketing pages load Google Analytics (gtag.js) directly — not through Google Tag Manager. If a dedicated Meta Pixel ID is configured, those same pages load the Meta Pixel for page views. Archive and account-verification routes do not load these scripts. Neither pixel is present when the matching environment variable is empty.

A successful movie-interest submission may send a named film_interest_submitted event. That event is a non-binding interest signal. It is not a purchase, lead form that implies payment, or a securities offering. Trailer playback may send a separate film_trailer_progress event with a watch milestone only. That event is engagement, not a conversion.

These identifiers belong only to Ferris Wheel Heritage. They are not shared with other websites. Search indexing remains separately gated and is off until a final-domain launch is approved.

If a dedicated Sentry project DSN is configured, unexpected public-page failures are sent to that project so the team can repair the visitor experience. Events are stripped of names, email addresses, cookies, query strings, and request bodies before they leave the browser or server. An optional error note is recorded only if a visitor chooses to send one, without personal identifiers.