1. File handling

When you register or verify a file, the SHA-256 fingerprint is computed locally in your browser. Your file is not uploaded to our servers for hashing, registration, or verification.

2. Data we store

To operate the verification registry, we store:

• the SHA-256 hash
• a registration timestamp (UTC)
• a tag / proof identifier
• issuer email provided by you and related status (e.g., confirmed/verified if applicable)
• optional Internal Reference / Document ID (if provided)
• technical security data (e.g., basic logs and rate-limiting data) to protect the service against abuse

3. Payments

If you purchase credits, payments are processed by Stripe. Stripe may require an email address for checkout/receipts. We do not store full payment card data.

4. Purposes and legal basis

We process data to provide the service, maintain the registry, and prevent abuse/security issues.

Legal bases: Art. 6(1)(b) GDPR (service provision) and Art. 6(1)(f) GDPR (legitimate interest in secure operation).

5. Data location and service providers

Processing is performed on servers located in the European Union. We use service providers (e.g., hosting and payment processing) only as necessary to operate the service.