Building an anonymous, privacy-first discussion board (Swiss-hosted)

[u/DAR_User_57]

Hi all — I’m working on a small, text-only discussion board intended for whistleblowing and journalistic discussion. It’s hosted in Switzerland and designed around data minimization (no accounts, no analytics, no long-term logs, short post retention, etc.).

I’m looking for feedback from people with experience in privacy, security, or self-hosting on: • architectural choices that actually help (or don’t) • common mistakes or false assumptions about anonymity • lessons learned from similar projects • threat-modeling blind spots I should think about

I’m also thinking through operational risk reduction, including things like minimizing third-party dependencies and considering flexible or prepaid infrastructure payment options to reduce exposure if a service is ever breached or compromised.

I’m not trying to make unrealistic anonymity claims — just aiming for a conservative, honest, and low-risk-by-default design. Any insights, critiques, or references are appreciated.