Privacy Policy
1. What we collect
- Your email address and what you send us, when you contact us or have a commercial agreement with us.
- Billing details, when a paid agreement exists, handled by our payment processor. We do not store card numbers.
- Service logs: timestamps, request data, and IP addresses, used for security, rate limiting, abuse prevention, and diagnosing failures.
- Protocol records: the SHA-256 fingerprint of each file, its size, and the position and proof metadata the recording environment needs to sign a proof. These come back to you in the proof. BitGraph keeps a public copy of each proof, which holds the fingerprint but never the file. A proof names a public Base block as its floor, which BitGraph only reads; what BitGraph writes to the chain is one Base transaction, the ceiling, over the proofs made since the last one (Ethereum anchors did this before October 7, 2026). Neither holds anything about you or your file beyond the fingerprint.
2. What we do not collect
File contents are not part of recording. Files are fingerprinted on your machine, and what travels is the fingerprint, the file's size, the position record and the recipe bytes a proof needs. Software that builds the new file for you, such as the MCP server, also sends the file's first bytes, to choose a placement, and its name, to name the new file; neither is written into a proof. A SHA-256 fingerprint does not contain the file and cannot by itself be used to reconstruct arbitrary file contents.
3. How we use it
To operate, secure, and maintain the service, to diagnose failures, to administer billing, to prevent fraud and abuse, to enforce our terms, to respond when you contact us, and to comply with applicable law. We do not sell personal data, and we do not use service data for advertising.
4. Third parties
- Amazon Web Services, for infrastructure, in a US region.
- Railway, for the anchoring service.
- Cloudflare, for network routing to the recording environment.
- Vercel, for hosting this site and counting its page views.
- Resend, for delivering contact form messages.
- Google Workspace, for email.
- Adobe Fonts, for the site's typeface, loaded by your browser.
- A payment processor, for billing under paid agreements.
This site counts page views with Vercel Web Analytics, which sets no cookies and does not identify you or follow you to other sites. It sets no non-essential cookies.
5. Retention
Ordinary service data (email, billing, support messages, and logs) is kept only as long as the purposes above need it. The ceiling transactions BitGraph writes to Base, and the Ethereum anchors written before October 7, 2026, are permanent by nature: nothing can remove them from the chain. The floor blocks proofs are measured against are the chain's own. BitGraph also keeps a public copy of each proof it makes, which holds a fingerprint of the file but never its contents, so the site can look proofs up. Copies already kept are under a ten-year retention lock.
6. Your rights
Depending on where you live, applicable law may give you rights to access, correct, or delete personal information we hold about you. Send requests to mike@bitgraph.ing and we will handle them as applicable law requires. These requests can reach ordinary service data. Copies of proofs, and the fingerprints in them, are under a ten-year retention lock and cannot be removed, including by us.
7. Children
The service is not directed at anyone under 13, or under 16 where local law sets that age. We do not knowingly collect data from children.
8. Changes and contact
If this policy changes materially we will give prominent notice on this site, and notice by email where we have an address for you. Questions: mike@bitgraph.ing.