Privacy Policy
Last updated: April 2, 2026
1. Overview
TimeAnchor is a free, open-source blockchain timestamp verification tool built by Aramantos Digital. It is designed to be privacy-first: all file processing happens locally in your browser. Your files are never uploaded to our servers or any third party.
2. Information We Collect
TimeAnchor is a static website with no user accounts, no login, and no database. We collect minimal data:
- No file data: Your files are hashed entirely in your browser using the Web Crypto API and WebAssembly. We never see, receive, or store your file contents.
- No account data: TimeAnchor does not require registration or login. No email addresses, passwords, or personal profiles are collected.
- Basic analytics: We use Vercel Analytics to collect anonymous, aggregated usage data (page views, referrers, country-level geography). This data cannot identify individual users.
- Server logs: Our hosting provider (Vercel) may temporarily log IP addresses and request metadata as part of standard web hosting. These logs are transient and not retained by us.
3. How We Use Information
The limited data we collect is used solely to operate and improve the service: monitoring uptime, understanding aggregate usage patterns, and diagnosing technical issues. We do not sell, share, or monetize any data.
4. Client-Side Processing
This is the core privacy guarantee of TimeAnchor:
- Files you select are read and hashed locally using SHA-256 via the browser's Web Crypto API or our
@aramantos/cryptoWebAssembly module. - Only cryptographic hashes (64-character hexadecimal strings) leave your browser, and only when you initiate a verification against a blockchain or the ProveChain API.
- OpenTimestamps verification queries public calendar servers with hash data only.
- EVM verification queries public blockchain RPC endpoints with transaction hashes only.
- ProveChain share link verification queries the ProveChain API with a share code only.
5. ProveChain Integration
If you sign in via the ProveChain tab, your authentication is handled directly between your browser and the ProveChain service (a separate Aramantos Digital product). TimeAnchor acts as a client, your session exists only in browser memory for the duration of your visit and is not persisted to disk. Credentials are sent directly to ProveChain's API. TimeAnchor's servers never see or process your ProveChain credentials. ProveChain's own privacy policy governs how ProveChain handles your account data.
6. Cookies and Tracking
TimeAnchor does not use cookies for tracking, advertising, or analytics. Vercel Analytics uses a privacy-friendly, cookieless approach. No third-party tracking scripts are loaded.
7. Third-Party Services
When you use TimeAnchor, your browser may make requests to the following external services as part of the verification process:
- OpenTimestamps calendar servers (for Bitcoin OTS verification): receive cryptographic hashes only.
- Public blockchain RPC endpoints (for Ethereum/EVM verification): receive transaction hashes only.
- ProveChain API (for ProveChain integration and share links): receives share codes, authentication tokens (if signed in), and cryptographic hashes.
Each of these services has its own privacy policy. TimeAnchor does not control what these services log.
8. Your GDPR Rights
Since TimeAnchor collects minimal data and has no user accounts, most GDPR data subject requests are not applicable. However, if you believe we hold any personal data about you, you have the right to:
- Request access to your data
- Request deletion of your data
- Object to processing
- Lodge a complaint with a supervisory authority
Contact us at support@aramantos.dev to exercise these rights.
9. Children's Privacy
TimeAnchor does not knowingly collect personal information from children under 16. Since the service requires no registration and collects minimal data, there is no mechanism for children to provide personal information.
10. Data Controller & Sub-Processors
Aramantos Digital is the data controller for all personal data processed through TimeAnchor. As a static, client-side application, TimeAnchor processes minimal personal data. The following sub-processors are used:
| Provider | Purpose | Data Processed |
|---|---|---|
| Vercel | Application hosting & analytics | Request logs, IP addresses (transient), anonymous usage analytics |
| OpenTimestamps | Bitcoin timestamp verification | Cryptographic hashes only (no personal data) |
For a full list of sub-processors or to be notified of changes, contact support@aramantos.dev.
11. Related Legal Documents
- Terms of Service
- ProveChain Privacy Policy (governs ProveChain account data when using the ProveChain integration)
12. Changes to This Policy
We may update this policy from time to time. Changes will be reflected on this page with an updated "Last updated" date. Continued use of the service after changes constitutes acceptance of the revised policy.