Privacy

What is already true

• This website uses no analytics, advertising or tracking cookies. It remembers your language choice in your own browser.
• The OneTime app keeps your photos and videos on your device. OneTime stores provenance, not your media.
• When you check a file on this website, the file never leaves your device. Your browser computes the file’s SHA-256 fingerprint and reads its Content Credentials ID, and sends only those two values to OneTime. For a file without Content Credentials, nothing is sent.
• OneTime keeps no record of a check made on this website: neither the result nor the fingerprint. To limit abuse it counts requests under a keyed, one-way fingerprint of your network address, never the address itself, and deletes each count within a day.
• OneTime’s service keeps standard request logs, which include IP addresses, for 30 days. Vercel, which hosts this website, keeps its own request logs.
• OneTime’s service runs on Google Cloud in the United States.
• Verified social accounts appear in your media’s provenance only if you choose to include them.
• OneTime keeps a signed history of its own records, including fingerprints of registered media, for 400 days. It is built so that entries cannot be changed or removed, so they are not deleted on request.
• Provenance included in a file travels with every copy of that file and cannot be recalled once the file is shared.

To be completed and approved before launch

• Who is responsible for your data, and how to contact them
• Each kind of data collected, why, and on what legal basis
• How long each kind of data is kept
• Service providers and any data shared with them
• Your rights and how to exercise them
• How to ask for your data to be deleted, what is deleted, what cannot be (the signed history, provenance inside files already shared), and how long it takes
• International data transfers
• Who may use OneTime, and the minimum age
• How changes to the policy are announced