Account & security privacy

Registration stores name, email, country, optional organisation, intended use and accepted document versions. Security-relevant events record time, event, a hashed browser marker and the IP address.

The IP address is encrypted, only available to the system administrator in the security log and deleted after 90 days by default. A stable non-reversible IP hash helps correlate abuse events. VPNs and mobile networks may make IP or location data inaccurate; they do not prove identity.

Public scans are processed separately and with data minimisation. Exact GPS is stored only after explicit browser permission. Obtain legal review before public sales.