Privacy Policy

What we collect

• Account data: your email address and a login identifier, managed through Amazon Cognito. If you sign in with Google, we receive only your email and a stable ID — never your password.
• Usage data: the wallet addresses you submit for verification, the reports generated for you, and basic request metadata (IP address, timestamp, browser user-agent) recorded for security and abuse prevention.
• Payment data: if you subscribe, payments are processed by Stripe. We never see or store your card number — Stripe returns only a customer reference and subscription status.

What we do NOT collect

• No advertising or third-party tracking cookies.
• No cross-site trackers, pixels, or analytics profiling.
• No sale or sharing of personal data with advertisers — ever.
• The wallet addresses you analyze are public blockchain data; we do not attribute them to you or to any person.

Cookies

We use essential cookies only — specifically, the session cookies your identity provider (Cognito) sets so you stay signed in. These are required for the site to function and carry no tracking purpose, so no consent banner is required under GDPR/ePrivacy. We set no analytics, marketing, or preference cookies. If that ever changes, this page will be updated and a consent choice provided before any non-essential cookie is set.

Why we collect it

To operate your account, deliver the reports you request, enforce usage limits, prevent fraud and automated abuse, process subscriptions, and meet legal obligations. Request metadata (IP/user-agent) exists to keep the service available and to stop bots — not to profile you.

How long we keep it

Account and submission records are retained while your account is active and for a reasonable period afterward for legal and accounting purposes. You may request deletion of your account and associated personal data at any time (see below); public on-chain analysis is not personal data and is unaffected.

Your rights

You may request access to, correction of, or deletion of your personal data, and you may export your submission history. Email contact@proofofcopy.com and we will respond within 30 days. Depending on your jurisdiction (e.g. EU/UK GDPR, California CCPA) you may have additional rights, including the right to lodge a complaint with a supervisory authority.

Processors we rely on

Amazon Web Services (hosting, database, email delivery, identity), Stripe (payments). Each processes data only as needed to provide its service. We do not use advertising networks.

Children

The service is not directed to anyone under 18 and we do not knowingly collect data from minors.

Changes

We may update this policy; material changes will be reflected in the "last updated" date above and, for account holders, by email.