Privacy Policy

Last Updated: February 3, 2026

At TruthTrace, we're committed to protecting your privacy and being transparent about how we handle your data. This policy explains what information we collect, how we use it, and your rights regarding your personal data.

1. Information We Collect

1.1 Wallet Authentication

We use wallet-based authentication (MetaMask, WalletConnect, etc.). We collect:

  • Your public wallet address
  • Cryptographic signatures for authentication
  • No passwords or private keys are ever collected or stored

1.2 Content Data

When you upload content for verification:

  • Content files (stored on IPFS, a decentralized network)
  • Metadata (file type, size, upload timestamp)
  • Platform links you provide (YouTube, X, Instagram, etc.)
  • Content hashes (cryptographic fingerprints)

1.3 Profile Information

Optional creator profile data:

  • Display name
  • Profile description
  • Avatar image
  • Social media links

1.4 Usage Analytics

We collect aggregated, anonymized analytics:

  • Verification counts and view statistics
  • API usage patterns
  • Browser type and device information
  • IP addresses (for security and rate limiting)

2. How We Use Your Information

We use collected data to:

  • Provide verification services: Store and verify your content authenticity
  • Maintain platform security: Prevent abuse, detect fraud, and enforce rate limits
  • Improve user experience: Optimize performance and develop new features
  • Communications: Send important service updates (you can opt out of marketing)
  • Legal compliance: Meet regulatory requirements and respond to legal requests

3. Data Storage & Security

Decentralized Storage: Content files are stored on IPFS (InterPlanetary File System), a distributed network. This means your content is not stored on a single server we control.

Blockchain Records: Content hashes are anchored on the Polygon blockchain, creating permanent, tamper-proof records. These blockchain records are public and cannot be deleted.

Database Security: User profiles and metadata are stored in encrypted databases with industry-standard security practices including encryption at rest and in transit.

4. Data Sharing & Third Parties

We do not sell your personal data. We may share data with:

  • Service Providers: IPFS storage, blockchain nodes, email services (with data processing agreements)
  • Legal Requirements: When required by law, court order, or to protect rights and safety
  • Business Transfers: In the event of a merger, acquisition, or sale of assets

Public Data: Content you verify is publicly accessible via claim codes. Anyone with a claim code can view verification proofs, timestamps, and platform links.

5. Your Rights & Choices

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct your profile information
  • Deletion: Request deletion of your account and associated data (note: blockchain records are permanent)
  • Data Portability: Export your verification data in machine-readable format
  • Opt-Out: Unsubscribe from marketing communications

To exercise these rights, contact us at support@truthtrace.app

6. International Data Transfers

TruthTrace operates globally. Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and compliance with GDPR, CCPA, and other privacy regulations.

7. Children's Privacy

TruthTrace is not intended for users under 18 years old. We do not knowingly collect data from children. If you believe a child has provided us with personal information, contact us immediately.

8. Cookies & Tracking

We use cookies and similar technologies for:

  • Essential: Authentication, security, and basic functionality
  • Analytics: Understanding usage patterns and improving services
  • Preferences: Remembering your settings and choices

You can manage cookie preferences through your browser settings.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or for legal compliance. We'll notify you of significant changes via email or prominent notice on our website. Continued use of TruthTrace after changes constitutes acceptance.

10. Contact Us

For privacy-related questions or to exercise your rights:

Email: support@truthtrace.app

Subject Line: "Privacy Request"

Note on Blockchain Permanence: Content hashes anchored to the blockchain are permanent and cannot be deleted or modified. This is by design to ensure verification integrity. However, you can request removal of your profile data and IPFS-hosted content files.