Privacy notice

ProofLink is a digital identity built around the holder's passport. The chip is read on the holder's own device and verified against the country that issued it. No identity document is transmitted to, processed by, or stored on this website.

ProofLink is the controller for the personal data described in this notice. Contact details are given under Your rights.

A request for early access collects the following:

• Your name, where you choose to provide it
• Your email address
• Your stated interest, being the application, age verification, or integration

This website does not request a passport, a date of birth, payment details, or a facial image. Those remain on your own device, and only if you subsequently choose to use the application.

We process waitlist data for one purpose: to contact you when a TestFlight place becomes available. The lawful basis is your consent, given when you submit the form, and you may withdraw it at any time.

The waitlist is not sold, licensed, or used to advertise third-party products, and it is not used for any purpose beyond the one stated above.

Waitlist entries are retained so that our operators can see who is waiting, and a copy is transmitted through Formspree, a form service acting as our processor. Formspree receives the same name, email address and stated interest, and delivers them to a mailbox we monitor.

Where you sign in as an operator, we retain only what is required to recognise the account: a name, an email address, and the sign-in method selected. This supports access control and is not used to build a profile.

Waitlist entries are retained until an invitation has been issued, or until you ask us to erase them, whichever occurs first. A request for erasure is actioned without waiting for an invitation to be issued.

You have the right to access, rectify, erase, restrict, and object to the processing of your personal data, and to withdraw consent at any time. To exercise any of these, email hello@prooflink.app from the address you registered. An operator account may be signed out at any time.

If you consider that your data has been handled improperly, you may complain to the data protection authority for your country. In the United Kingdom this is the Information Commissioner's Office.

The public pages set no advertising or analytics cookies. Where you sign in, a single essential session cookie maintains that session. No other cookies are set.

On the device, the passport is read over NFC and stored encrypted under a passcode that is never transmitted or retained by us. A zero-knowledge proof binds that document to a wallet. None of this passes through this website.

The waitlist is not intended for children under 13, and we ask that an email address belonging to a child is not submitted.