An honest account of what BitSeal sees, what it does not, who processes data on our behalf, and the rights you have over that data.
BitSeal is a cryptographic timestamping service. Files you seal never leave your device. Only a hash fingerprint, filename, size, MIME type, entropy measurement, and timestamp are transmitted to our ledger. We use Vercel for hosting, Neon for ledger storage, and Cloudflare for bot protection. Ledger entries are designed to be durable and publicly queryable by hash. We do not sell data and run no advertising profiles.
All cryptographic hashing happens in your browser before anything is sent to our servers. The following categories of data never reach BitSeal infrastructure.
To operate the ledger and issue a verifiable seal, the following fields are transmitted to our servers when you use the Evidence Sealer or the Verifier.
Root hash64-character BLAKE3 hex fingerprint of the file. Cryptographically irreversible.SHA3-512 hashSecondary NIST-standard hash of the file. Cryptographically irreversible.FilenamePlain text string, truncated to 255 characters. Filenames may contain personal or project names, consider renaming files before sealing if that concerns you.File size and MIME typeByte count and detected content type.Shannon entropyNumeric measure of byte-distribution randomness across the file.Timestamp (UTC)Unix time at which the seal was issued by the server.Ed25519 signatureCryptographic signature binding the root hash and timestamp under Orygn's signing key.IP addressObserved by our hosting provider (Vercel) and our bot-protection provider (Cloudflare Turnstile) for each request, for the purpose of abuse prevention, rate limiting, and security investigation.User agentBrowser identifier string, recorded in edge logs.Request metadataStandard web-server access records, including request time, path, method, and response status.The data described above is used strictly for the operation, security, and improvement of the Service.
We do not use BitSeal data to train machine-learning models, do not sell or rent it, and do not share it with third parties except the subprocessors listed in Section 4.
BitSeal relies on the following service providers to operate. Each is contractually bound by its own privacy and data-processing commitments, which are linked for your reference.
BitSeal seals are designed to be durable, publicly queryable by hash, and independently verifiable. We want to be precise about what that means.
The Ed25519 signature on each seal is verifiable against Orygn's published Authority public key. Any party in possession of a signed manifest or PDF certificate can confirm the signature independently of BitSeal's hosted infrastructure using any standard Ed25519 verifier.
The hosted ledger lookup at bitseal.orygn.tech/verify, the PDF generation endpoint, and the API are operated by Orygn LLC on commercial cloud infrastructure. Their continued availability depends on Orygn's continued operation of them. We do not represent that the hosted ledger is immortal, and we recommend that you retain your own copy of any signed manifest or PDF certificate that you rely on.
Once a seal is recorded, its ledger entry is treated as part of an evidentiary record for the ordinary course of business. We do not delete individual seal entries in response to general deletion requests, because doing so would defeat the evidentiary purpose of the Service. The narrow circumstances under which we will remove a ledger entry are set out in Section 9.
Retention for each category of data is determined by the subprocessor that holds it, as described below. We do not maintain independent long-term copies of subprocessor logs.
Orygn LLC is established in the United States and processes data in the United States. If you access BitSeal from outside the United States, your information will be transferred to, stored, and processed in the United States. For transfers originating in the European Economic Area, the United Kingdom, or Switzerland, we rely on the Standard Contractual Clauses executed by our subprocessors, and on the UK International Data Transfer Addendum where applicable. Google LLC is certified under the EU-U.S. Data Privacy Framework and the UK and Swiss extensions. Cloudflare, Inc. and Vercel Inc. each offer Standard Contractual Clauses to customers transferring personal data from the EEA.
Depending on where you live, you may have the following rights with respect to your personal data. We will honor these rights to the extent required by applicable law and consistent with the evidentiary design of the Service.
To exercise any right, email [email protected] from the address associated with the request and include enough detail for us to locate the relevant records. We respond within the timeframes required by applicable law, generally within thirty days.
The ledger is designed to be a tamper-evident record of proof-of-existence. We do not delete ledger entries in response to general deletion requests. We will consider removal only in the following narrow circumstances.
Removal of a ledger entry is logged. The fact of removal, and a record of the root hash removed, may be preserved in an internal ledger to document the purge.
BitSeal is not directed to children under the age of thirteen. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us and we will take reasonable steps to delete it.
We use commercially reasonable measures to protect the data we process, including encryption in transit (TLS), encryption at rest through our cloud subprocessors, restricted access to signing keys held as Vercel environment variables, Neon connection strings held as server-only secrets that deny direct client access to the ledger, and a Cloudflare Turnstile layer in front of submission and verification endpoints.
If we learn of a personal-data breach affecting BitSeal, we will notify affected individuals and the relevant authorities within the timeframes required by applicable law, including seventy-two hours under Article 33 of the GDPR where feasible.
We may update this Privacy Policy to reflect changes in the Service or in applicable law. The effective date at the top of this page will be updated when we do. Material changes will be surfaced on the BitSeal homepage for at least thirty days before they take effect. Prior versions are available on request from the contact address below.
This Privacy Policy is governed by the laws of the State of Texas, without regard to its conflict-of-laws provisions. Any dispute arising under it is subject to the dispute-resolution terms described in BitSeal's Terms of Service.