Privacy

What we store. Account email and a salted password hash; passport records an operator submits (agent name, operator name, domain, homepage, contact email) which are public registry data by design once submitted; status history; verifier reports attributed to the filing account; counted verify-call metadata (which key, which passport, when). API keys and license keys are stored only as hashes.

What we never store. Raw API keys, raw license keys, or the domain-challenge token after verification completes (its hash is cleared on issuance).

Cookies. One session cookie (HttpOnly, SameSite=Lax, Secure on the live site) keeps you signed in. No advertising or cross-site tracking cookies are set by this product.

Sharing. Passport records, status and bands are public — that is the registry's purpose. Account emails and report notes are not published. Contact: [email protected].