http://nuclearcdboxafziza4mgohcwhzfjiyg6zeslnry33pepsgtur2wyeyd.onion/privacy.html
They can also theoretically discover the anti-spam random ID and post password, until they are both deleted after 90 days, using them to correlate posts made by the same uncleared browser. If the website server were hacked or legally seized, this information would become available to the attacker.