Trust & data
What Proof Monitor stores, what it logs, who else sees it, and when it's deleted. Plain and specific.
The short version
- No account, no cookies, no third-party ad or analytics trackers. We count visits ourselves, without cookies (see below).
- Results (verdicts, explanations, screenshots, recordings) are public to anyone who has the result link. Links are random and not listed or indexed by search engines.
- Results and the files attached to them are deleted after 90 days. App binaries are deleted as soon as the test device has them, within 24 hours at most.
- We never store your IP address, only a salted one-way hash used for daily limits and abuse prevention.
- When you paste a link, our server reads that public page once to suggest checks. We don't keep the page.
What we store
| Data | Why | Kept for |
|---|---|---|
| Your request: text, link, the confirmed checks and regions | To run the check and show the result | 90 days |
| Reference files you attach (images, video, text/CSV/JSON) | To compare against. Only file names appear on the result page; the files themselves are never public. | 90 days if used in a check; 24 hours if never used |
| App files (APK/IPA) | To install on the test device | Deleted once the device provider has the file; at most 24 hours |
| Results: verdicts, explanations, screenshots, recordings | The result page and API | 90 days |
| Email address | Only if you join the monitoring waitlist or ask us to download an app, to reply to you | Until monitoring launches or your request is handled, or until you ask us to delete it |
What we log
For every request to this site we record the time, method, path, status code, response time, a salted hash of the IP address, the user agent, the referrer, and the version of the site that answered. We use this to prevent abuse and to understand which pages are used. Request logs are deleted after 180 days. Daily-limit counters (per IP hash) are deleted after 7 days.
Our hosting provider may keep its own short-lived infrastructure logs, which can include IP addresses.
How we measure use of the site
We run our own analytics on our own servers. Nothing is sent to an analytics company, and nothing is stored in your browser.
- What we record: the pages you view and the steps you take here (for example pasting a link, picking a suggested check, running a check, copying a result link), the host name of the site you check, the first 300 characters of a check you write in your own words, the referring site and any campaign tags in the link, the country your browser's time zone belongs to, your browser language, and your device type, browser and operating system.
- How visits are grouped: by a one-way hash of a secret, the date, your IP address and your user agent. It changes every day, so we can't follow you from one day to the next, and the IP address itself is never stored.
- Kept for: 180 days, then deleted. Used only to understand and improve Proof Monitor; never sold or shared.
Who else processes your data
- Test-device provider: runs the browsers and phones. It receives the link or app file, the checks, the reference files, and produces the recordings and screenshots, which it keeps under its own retention policy. TODO: name the provider and link its privacy policy
- Anthropic (Claude API): reads your request text and attached files to draft the plan. Not used for model training under Anthropic's commercial terms.
- Railway: hosting and database.
Your choices
- Don't include passwords, personal data or anything confidential in a check: results are public to anyone with the link.
- To delete a result early, email TODO: privacy@your-domain with the result id. We delete it, its screenshots and its files.
Who runs this
TODO: legal entity name, TODO: registered address. See Contact and Terms.