1. Scope and responsibility
This notice explains how the Proof21 website handles personal information when people, AI agents, crawlers, or platforms retrieve its pages and resources, use local search, choose display settings, or download examples. The business contact appears on this page. This website is an informational release; future hosted verification services require a service-specific notice before collecting new categories of information.
2. Information involved in a visit
Delivering a webpage necessarily involves network information. Our hosting and delivery provider, Vercel, can process IP addresses, requested URLs, request times, browser or user-agent information, response codes, and security or diagnostic events. Referring-page information may be present when supplied by your browser. These records support delivery, abuse prevention, troubleshooting, and security; they are not a promise that a visit is anonymous or leaves no logs.
We do not provide account registration, wallet connection, payment checkout, or an evidence-upload form in this website release. Do not place private keys, seed phrases, access tokens, personal financial records, or confidential evidence in URLs or send them to the website. URLs can be recorded by browsers, hosting systems, and intermediaries.
3. Features that stay on your device
Documentation search downloads a same-origin search index and matches your query in your browser. The search text is not submitted to Proof21 or an AI provider. Motion controls and scroll-driven illustrations run locally. Animations, posters, and logos are served as site assets rather than embedded from advertising or video platforms. Requesting those files still involves ordinary hosting requests.
The optional downloaded demonstration operates on synthetic fixtures without network, wallet, or telemetry calls. This statement applies to the shipped example, not to modifications, external tools, or the environment in which you choose to execute it. Reading or downloading is not permission for an agent to execute code.
4. Cookies and similar storage
This release does not install advertising trackers, analytics scripts, marketing pixels, or third-party media embeds. A compact browser-storage record remembers your privacy selection for up to 180 days. When you explicitly enable display preferences, the site may also remember your motion setting. Without that choice, changing motion affects the current page without persistent preference storage. Language selection uses the page URL, not a tracking cookie.
Hosting protection or security features may use essential cookies when those features are invoked. Our browser choice does not control cookies set by an unrelated site you visit through a link. See the Cookie policy for the exact application storage keys, expiration behavior, and how to reset them. We do not interpret scrolling, continued browsing, or closing a settings dialog as consent to optional storage.
5. Purposes and legal bases
We use information only as needed to deliver and protect this website, investigate faults or abuse, remember requested privacy choices, and respond to communications you choose to send. Where a legal basis is required, necessary delivery and proportionate security can rely on legitimate interests in operating a safe website, subject to applicable balancing requirements. Compliance with a binding legal duty relies on that duty. Optional persistent display preferences rely on your affirmative choice and can be withdrawn. We do not use this site for automated decisions with legal or similarly significant effects about visitors.
6. Communications you initiate
When you email the published contact, the message, address, and information you voluntarily include are processed to respond and handle the request. Only provide information needed for that purpose. Please use sanitized examples rather than customer records or secrets. Email providers also process messages under their terms. Sending a question does not subscribe you to marketing. We do not operate a newsletter signup on this release.
7. Recipients and international processing
Vercel processes delivery and security information as the hosting provider. Infrastructure providers and, where necessary, professional advisers or competent authorities may receive information for the purposes above. We do not sell personal information, share it for cross-context behavioral advertising, or use it to build advertising profiles. Links to external protocols or companies are references, not data-sharing integrations or endorsements.
Infrastructure may process information outside your country. Where applicable law requires transfer safeguards, the operator must use an appropriate lawful mechanism and provider terms; this notice does not claim that every request stays in one region. Vercel's own privacy information describes its separate practices. Following external links makes you subject to the destination's practices.
8. Retention
Privacy-choice records expire after 180 days and are removed or replaced on a subsequent visit. Saved display preferences are cleared when you choose essential-only storage, reset your choices, or the preference permission expires. You can also remove them immediately using your browser's site-data controls. Blocking browser storage may prevent us from remembering a choice but does not block access to content.
Hosting diagnostic and security records follow the provider configuration and justified operational or legal requirements. Correspondence is kept only as long as needed to address the request, maintain an appropriate record of it, or meet a legal obligation. Retention decisions consider the purpose, sensitivity, applicable limitation periods, and whether information can be deleted or minimized. There is no user evidence database in this website release.
9. Your choices and rights
Depending on applicable law, you may have rights to access, correct, erase, restrict, object to processing, or obtain a portable copy of personal information. Consent can be withdrawn as easily as it is given for the browser preferences controlled here. You may complain to your competent data-protection authority without first contacting us. Contact the published privacy address to make a request. We may ask for proportionate information to verify a request, but never your wallet seed phrase or private key. Rights are subject to legal exceptions, and we will not invent data merely to identify a visitor.
Global Privacy Control does not trigger sale or advertising sharing: neither is enabled regardless of the signal. Do Not Track and similar settings do not replace your browser's storage controls. The current website remains usable after rejecting optional storage.
10. Security, public chains, and children
We minimize data collection and use restrictive browser security policies, but no website, email system, or network is guaranteed secure. Do not submit sensitive evidence. The website does not write to Bitcoin or another chain. Information you independently publish to a public blockchain may be permanent and outside the operator's deletion control; a hash alone is not a guarantee of confidentiality.
This is technical material intended for a general adult audience, not a service directed at children. We do not knowingly solicit children's personal information. A parent or guardian who believes a child has sent personal information should contact the privacy address so it can be assessed and handled appropriately.
11. Changes and contact
The version and date above identify this notice. Material changes to data uses must be described before those uses begin, and fresh permission must be requested where required. Preferences remain accessible in the footer. Questions and rights requests can be sent to the operator's published privacy contact. This notice does not represent an independent security audit or a certification of compliance in every jurisdiction.
12. Automated visitors and agent-related information
Agents and crawlers make HTTP requests much like browsers. Delivery and security systems may record IP addresses, user-agent strings, requested resource paths, timestamps, response status, request identifiers, and abuse signals. Such information may distinguish automated traffic, investigate failures, and enforce proportionate access limits. A claimed bot name is not verified identity. These records do not, by themselves, reveal an agent's hidden prompts, private memory, model reasoning, or activity on other services. We do not attempt to obtain those through this website.
An identifier for an agent, wallet, task, or receipt may relate to a person or organization. Hashing or pseudonymization does not automatically make data anonymous. Do not include secrets, personal records, or sensitive task payloads in resource URLs. The current static site does not accept job traces, verification submissions, wallet connections, or customer evidence. Its offline example sends no telemetry. External agent platforms may independently process what their users send or retrieve; their own notices and agreements apply.
13. Potential future cookies and measurement
Future versions may use cookies, local storage, pixels, SDKs, or server-side measurement to understand page and resource usage, referrals, performance, and interaction with agent-facing services. Analytics, attribution, and advertising tracking are not enabled in this version. This description is notice of possible changes, not a claim of present use or a request for blanket permission.
Before enabling new processing, the applicable notice and storage inventory must identify the actual purposes, providers, data categories, retention, recipients, safeguards, and legal basis. Non-exempt storage or tracking requires prior consent where applicable; applicable opt-outs and preference signals must be respected. A visitor or agent simply fetching a page, continuing to browse, or accepting display storage does not consent to future tracking. Optional analytics must not silently become a prerequisite for documentation access. New verification services will separately explain task data, retention, processor/controller roles, and any automated decision-making before use.