Legal
This policy covers the open-source tools operated by Attestto Inc.: verify.attestto.com, app.attestto.com, attestto.org, and the Attestto ID browser extension.
What we collect
- Anonymous analytics (GA4) — page views, referrer, browser type. Only loaded after you grant consent via our cookie banner. No user IDs, no cross-site tracking.
- Consent preference — stored in your browser's localStorage so we remember your choice.
- Language preference — stored in localStorage to serve the site in your preferred language.
What we do NOT collect
- Document content, file data, or any uploaded files — the verify widget processes everything client-side in your browser. Files never leave your device.
- Biometric data, national IDs, or government-issued document numbers.
- Personally identifiable information (PII) from verification operations.
- Cryptographic keys, wallet addresses, or credential contents.
Browser extension
The Attestto ID extension generates and stores cryptographic keys locally in your browser. Keys are never transmitted to Attestto servers. Verifiable credentials stored in the extension remain on your device unless you explicitly choose to present them.
Third-party services
We use Google Analytics 4 for anonymous site analytics, loaded only after consent. We do not sell, share, or transfer your data to any third party for advertising or profiling purposes.
Data retention
We retain anonymous analytics data for 14 months (GA4 default). We do not maintain user accounts or databases of personal information for the open-source tools.
Your rights
Under Costa Rica's Ley 8968 (ARCO rights): You have the right to access, rectify, cancel, and oppose the processing of your personal data.
Under GDPR: You have the right to access, erasure, portability, and restriction of processing. Since we collect no PII, these rights apply primarily to analytics data, which you can prevent entirely by declining cookies.
Contact
For privacy inquiries: [email protected]