Privacy
Short, because the architecture does most of the work a privacy policy usually has to promise.
If you use the contact form we hold your name, work email, organisation, role, the service and jurisdiction you select and whatever you write in the message, for the purpose of replying. Nothing else.
Identities are tokenised on your machine with a key we never receive. When proofs run on your infrastructure, your records stay there.
On the hosted platform, your records arrive already tokenised, and they stay only as long as the proof needs them. As soon as a proof is complete, its input records are deleted automatically. If a run fails, they are kept for three days so it can be retried, then deleted the same way. What we keep is what you need to rely on the result: the signed proof, its verdicts and its counts, not your records. The findings that show which tokens failed which rule remain available for you to download for 30 days, then are removed automatically.
None of this depends on someone remembering to delete: the platform enforces every one of these limits on its own schedule.
This site sets none. It carries no analytics, no tag manager and no third-party script beyond the font files.
Contact enquiries are deleted after twelve months unless a commercial relationship begins. Write to [email protected] to ask what we hold, to correct it, or to have it removed.
One day. One proof. You decide what comes next.
