◈ Legal
Everything you agreed to,in one place.
The terms of service, privacy notice, subprocessor list and acceptable use policy. A data processing addendum (DPA) is not available.
Privacy Notice
What reaches us, why, and how long it stays.
§ 01
The short version
The browser file flow hashes the exact bytes locally without uploading the file body. Notarization sends the fingerprint plus filename, byte size and available file type. Metadata stays off-chain; the fingerprint is public. This notice also explains account, payment and abuse-control data.
Quantum Notary is a product of Endurance Applications. Endurance Applications is the operator that receives and stores everything described below.
§ 02
What we collect
The table is the substance of this section: what reaches us, why we have it, and how long it stays.
| What | Why | Kept for |
|---|---|---|
| SHA-256 fingerprint | The SHA-256 hash of the file being notarized. | Lifetime of Quantum Notary; also published in Base transaction input |
| Email address | Account identity, receipts, service notices. | Life of the account |
| Payment details | Held by Stripe. We see the outcome and invoice records. | Per Stripe’s terms |
| Request logs (incl. IP) | Rate limiting and abuse control. | 90 days, then deleted |
| Sanitized browser error reports | Diagnose crashes using the build version, broad page category, code locations and a validated request ID when available. No session replay, files, filenames, digests, raw error messages, form content or authentication URLs are included. The monitoring provider also receives connection information such as IP address. | Per the monitoring provider’s configured retention |
| File name, size, type | Identify and manage notarization records. | Lifetime of Quantum Notary, subject to applicable data rights |
| Captcha challenge data | Sign-up and request abuse control. | Per the vendor’s terms |
§ 03
What we never collect
File name, size, and content type are not included here: we retain them as off-chain metadata to identify and manage your notarization records.
- File contents. We never receive or retain the file itself.
- Third-party analytics. We do not add analytics trackers to the site or app. Optional video playback connects directly to YouTube, whose processing is described in section 13.
- Advertising trackers. We do not add advertising trackers to the site or app. This does not promise tracking-free playback from an optional third-party video provider.
If either tracker policy changes, this section will be updated first.
§ 04
Legal basis for processing
We process your fingerprint, account email, billing details, and notarization metadata to provide the service. We process request logs and CAPTCHA data to prevent abuse. Optional recovery information previously supplied with consent remains subject to that consent and your applicable rights.
§ 05
Who else touches it
Each company that touches any part of the service is named, with what it receives and where it operates, on the Subprocessors document.
§ 06
Where it is processed
The application and database run in the United States. Per-vendor regions are on the Subprocessors document; anything you send to the service reaches US infrastructure.
§ 07
How long we keep it
Retention is per category, in the table in section 02.
Notarization records have no scheduled expiry. We retain service proof records for the lifetime of Quantum Notary for future reference and do not support record deletion as a service feature. Account closure and refunds do not delete proof history. This policy does not limit applicable personal-data rights described in section 08.
Once a fingerprint is included in a Base transaction, neither you nor we can remove it. We do not promise a general deletion period for order data. Previously issued private receipt links keep their recorded expiry. Links issued under the one-year access policy provide at least one year from finalization; earlier links retain their original access period. Link expiry does not delete associated service or order records.
§ 08
Your rights
Depending on your location and our relationship, applicable law may provide access, correction, deletion, or export rights. Contact [email protected]. Quantum Notary can manage service records subject to its retention obligations, but it cannot remove digest bytes from an already included public Base transaction.
§ 09
Cookies and local storage
Your session state and theme preference are kept in your browser. Our own marketing pages set no advertising or analytics cookies. Captcha vendors set what their challenge needs on the pages where a challenge runs. Loading an optional YouTube player allows provider processing under Google's policies; privacy-enhanced mode is not a promise of cookie-free or anonymous playback.
§ 10
Children
The service is not directed at children, and we do not knowingly collect their data.
§ 11
Security of what we do hold
TLS on every connection, credentials hashed at rest, tenant isolation at the database layer, and relayer accounts permitted to submit anchoring transactions and nothing else. The full account, including its limits, is on the security page.
§ 12
Breach notification
If we learn of a breach affecting data we hold about you, we will notify the address on your account without undue delay, and say what happened, what was affected, and what we are doing about it.
§ 13
Optional video playback
Where we offer videos, their posters are hosted locally. Browsing, scrolling, and focusing a thumbnail do not load YouTube. Loading the player connects to YouTube. The player uses the privacy-enhanced youtube-nocookie.com host and does not start playback automatically.
After you load a player, Google receives browser and network information, including your IP address, our site's origin as the referrer, and playback interactions. Its own policies govern that processing. Privacy-enhanced mode does not mean anonymous, tracking-free, or cookie-free playback. We send no file contents, filenames, customer digests, or receipt tokens to the player.
You can use the written lessons and interactive demos without loading a player. The provider disclosure links to Google's Privacy Policy.
§ 14
Changes to this notice
Material changes are announced before they take effect, to the address on your account. The date at the top of this document is the entire record of change.
§ 15
Contacting us about privacy
[email protected] reaches Endurance Applications for anything in this notice.
Your file stays on your device.
Your browser computes the SHA-256 fingerprint locally. This notice explains the data we collect and retain.