Glossary

Term	Definition
Backup short code	8 characters (`K7QF 29XM`) to enter on `oh.gy` if the QR will not scan. Expires with the QR.
Black screen	Completely black screen while recording. The preview is off, recording continues.
Chain of custody log	List of a session's events, append-only, each entry signed by the server.
Check-in	Entering your code after a protest, from the account or the field phone, to say you are fine.
Collective	Shared space of a legal team, an observatory or a newsroom, created from a personal account. Each member keeps their own account; member and admin roles. See Collectives.
Connection QR code	QR code that connects a field phone to a session. Valid for 10 minutes, reusable until then.
Contacts needed	Number of key shares that must be brought together to rebuild your key. 1 by default, adjustable in the advanced settings of the contacts page.
Cut off the phones	Stop the QR code and every connected phone from sending to the session. Nothing is erased.
Decoy account	Almost empty dashboard displayed after the duress code, if you have enabled it. Off by default.
Derivation document	Document signed by a collective that links a published blurred copy to its source segments and describes the transformations. See Publishing a blurred copy.
Discreet mode	Audio only, black screen and automatic resume when the page is reopened.
Drop box	Public QR code of a collective: a witness scans it and films without an account, the footage leaves encrypted for the collective. See Drop boxes.
Duress code	Second check-in code, to enter if you are being forced. Same screen as the normal code; sharing with contacts, 30-day lock, alert.
End-to-end encryption	Data is encrypted on your device and only decrypted on the device of an authorized person. The server only stores unreadable data.
Field alert	Holding "Alert" for 2 s on the field phone: opens the current session to the designated contacts and alerts them. See Field alert.
Field phone	The phone that films. It can only send.
Gap	Segments never received within a take. Declared, dated, never filled.
Hash	Result of the SHA-256 function applied to a file. The slightest change to the file changes the hash.
Hash chain	Each segment carries the hash of the previous one in the same take. A removed or modified segment visibly breaks the chain.
Hide from my contacts	Hide a session from all your contacts, without erasing anything. Reversible: "Show to my contacts again".
Identifier	8 characters drawn at random (`7F3K·QM2D`). Not secret.
Incident file	Sessions of one incident gathered on a common timeline, played together and exported as verifiable extracts. See Incident files.
Invitation code	12 characters (`ABCD-EFGH-JKLM`) asked for when creating an account while registration is invite only. Valid for one person for 30 days.
Invitation link	Link sent to a contact, single-use, valid for 48 h, protected by a phrase given verbally.
Key share	Fragment of your key held by a contact. With the default setting (1 contact needed), it is enough to rebuild the key; if 2 or more contacts are needed, a key share on its own reveals nothing.
Legal export	Archive that a third party can verify: originals, signed manifest, timestamp, log, instructions.
Lock	Period during which nobody can delete a segment, counted from when it is received. From 1 h to 30 days, can be extended up to 30 days, can never be shortened.
Manifest	Document produced when a session closes: list of segments, hashes, times, gaps, log. Signed by the server and timestamped.
Normal code	6-digit check-in code. Stops automatic sharing.
oh.gy	Neutral address of the field phone. QR codes point to it.
Passphrase	What opens your account and builds your key. Never leaves your browser.
Publication	Blurred copy of a passage, made public by a collective on `ripoux.fr/p/…`, with the proof of its origin. Can be withdrawn at any time. See Publishing a blurred copy.
Quota	An account's storage space: 20 GB by default.
Read and modify	Contact role: sees, exports, extends the lock, receives the reminders, alerts and automatic sharing.
Read only	Contact role: sees the sessions shared with them.
Recording window	Hours during which the field phone can send. Can be extended from the session, never more than 7 days after the start.
Recovery key	String of characters displayed only once when the account is created. It replaces the passphrase if you forget it.
Reminders, then sharing	Sharing rule if you do not check in: a reminder, then your contacts are asked to check on you, then sharing with contacts. Never any publication.
RIPOUX	Récupération Instantanée et Protection des Originaux par Upload eXterne: instant recovery and protection of the originals by external upload.
Segment	A 2- to 3-second slice of video or sound, a file that can be played on its own, encrypted and sent separately.
Segment key	Key included in a verifiable extract: it opens a single segment without disclosing the session key.
Send queue	Encrypted segments waiting to be sent on the field phone. Emptied as acknowledgments arrive.
Session	A protest prepared from "New session": a recording window, a lock, contacts, a sharing rule, and what has been received.
Session root	Hash that sums up every segment of a session, signed by the server and timestamped at closing. An extract is tied to it by a short path of hashes.
Standby access	Access to a session, prepared in your browser for a ticked contact. The server only opens it after unanswered reminders, an alert or the duress code, without being able to read it.
Take	One recording, from start to stop, on a field phone.
Testimony	Encrypted account attached to a session, written from the account or the phone, signed and timestamped. A correction is added as a new version. See Testimonies.
Timeline	View of a session or an incident file along the time axis: each segment received, each gap, each quality change.
Timestamp	Proof issued by an independent authority (`.tsr` file), showing that a document existed at a given date.
Tor	Network that hides your IP address. ripoux.fr and the field phone each have a .onion address.
Trusted contact	Person with an account, chosen by you, who holds a key share and can receive your sessions.
Verifiable extract	A few consecutive segments of a take, which prove themselves without disclosing the rest of the session. See Verifiable extracts.
Watch room	Page that shows, during the protest, the sessions in progress you can read, their state and the alerts. See Watch room.