This policy explains what AmberVouch does and does not collect when you use our free evidence tool and our paid filing services, who else may see what, and what rights you have.
Version v1.0 · Effective 2026-10-13 · Last revised 2026-10-13
The short version. Our free tool runs entirely in your browser — your file is never uploaded to us. The only thing that leaves your device is a 32-byte fingerprint, sent to public OpenTimestamps calendar servers, which will also see your IP address. For paid filing services we handle the minimum information needed to file for you. We do not run advertising or analytics trackers.
1. Who is responsible
The data controller is {Company legal name}, {Registered address}.
If required in your jurisdiction, you can also complain to your local data protection supervisory authority.
2. Scope
This policy covers ambervouch.com, including the international evidence tool at /intl, our other public pages, and the filing services described in our Terms of Service.
It does not cover third-party services you reach through links on our site (for example opentimestamps.org, wipoproof.wipo.int, copyright.gov). Their own privacy policies apply there.
3. What we do not collect
Your files. The free tool computes the SHA-256 fingerprint inside your browser. Your file is never uploaded to us, and we never see, receive or store it.
No account required. The free tool works without registration. We do not ask for your name, email or phone number to use it.
No advertising or analytics trackers. We do not run ad networks, and we do not use analytics services that profile you.
No tracking cookies. See section 12.
4. What third parties see
Using the site involves these third parties. We list them plainly so there are no surprises:
The 32-byte fingerprint of your file, your IP address, and the time of the request
To aggregate fingerprints into a Bitcoin transaction and issue your .ots proof
Cloudflare (our hosting provider)
Standard web server data for every page request: IP address, user agent, date/time, requested URL
To serve the site and protect it from abuse
WIPO
Your file's fingerprint and the work information needed for the token
Only if you order the WIPO PROOF filing service
U.S. Copyright Office
The application data and the deposit copy required for registration
Only if you order the U.S. registration filing service
Payment provider (when card checkout is enabled)
Payment details and billing information
Only for paid services; we never see your full card number
SoMark Free OXR API (third-party OCR service)
The image or PDF you submit for OCR, only when you select the OXR engine and tick the consent box
To return text and layout for that request. Local Tesseract mode uploads nothing.
OCR and uploads. The OCR tool offers two engines. Local Tesseract processes images inside your browser and uploads nothing. If you choose OXR and consent, the file is sent through our server to SoMark's free OXR API for that request. Do not use OXR for sensitive or unredacted documents.
About the fingerprint and your IP. The fingerprint cannot be reversed into your file, and no file content is ever transmitted. But the calendar servers do see your IP address. If that matters to you, use a VPN or Tor before anchoring.
5. What we collect, and when
When you just browse or use the free tool: nothing beyond what Cloudflare processes as our host (section 4). We store no record of your use.
When you email us: your email address, name if you give it, and whatever you write — so that we can reply.
When you order a filing service: the work information needed for the filing (work title, author name, claimant name, publication status, nature of the work), your email address for delivery and follow-up, and — for U.S. registration — the deposit copy the Office requires. We keep this to the minimum the authority demands.
When you pay: invoicing details (billing name, address, tax number if applicable). Card details go to the payment provider, not to us.
6. Why we are allowed to process it (lawful bases)
To perform a contract — when you order a filing service, we process the information needed to deliver it.
Legitimate interests — running and securing the website (for example Cloudflare's abuse protection), and keeping the records needed to run a lawful business.
Legal obligation — tax and accounting records where the law requires them.
Consent — where we ever ask for optional information beyond the above, we ask first and you can withdraw at any time.
7. Who we share it with
The third parties listed in section 4, each only for the purpose stated there.
Authorities or courts, where we are legally required to do so.
A future acquirer of the business, in which case we would tell you before your data moved.
We do not sell your personal data, and we do not share it for advertising.
8. International transfers
AmberVouch is operated from {Country}. If you are outside that country, the information you give us (for a filing service, or by emailing us) will be transferred there.
Cloudflare serves the site through a global network, so a page request may be processed outside your country.
Where the law requires it, we rely on appropriate safeguards for such transfers, and we apply contractual protections with our processors.
9. How long we keep it
Free tool usage: we keep nothing, because we receive nothing.
Filing service records: for as long as needed to deliver the service, plus any period required by tax and accounting law (typically several years), after which we delete or anonymise them.
Emails: as long as needed to handle your request, then deleted.
Files you send us for a filing: deleted on request after the filing is complete; by default within 90 days.
10. Security
The site is served over HTTPS only.
We collect as little as possible, which limits what can ever be lost.
If a breach affecting your personal data occurs and the law requires notification, we will notify you and the relevant authority without undue delay.
11. Your rights
Depending on where you live, you may have the right to:
Access the personal data we hold about you, and get a copy.
Correct inaccurate data.
Delete your data ("right to be forgotten"), where the law applies.
Restrict or object to certain processing.
Data portability — receive data you gave us in a machine-readable format.
Withdraw consent at any time, where processing is based on consent.
Complain to your local data protection authority.
To exercise any of these, email privacy@ambervouch.com. We will respond within 30 days. If you are in California, we also honour the rights above under the CCPA/CPRA; we do not sell or "share" your personal information for cross-context behavioural advertising.
12. Cookies and similar technologies
We do not set advertising or analytics cookies.
The site stores your interface-language choice in your browser's local storage, so the page remembers it. It never leaves your device.
To pick a sensible default language on your first visit, our host tells the edge worker the two-letter country code it derives from your IP address; we derive the matching two-letter language code and write both into short-lived cookies (av_geo and av_lang, 30 days). The IP address itself is not stored. Once you choose a language yourself, that choice always wins and the country code is no longer used.
WebRTC and the first-visit prompt (functional, one-off): on your first visit only, the page uses the browser WebRTC interface with a STUN server to learn the public IP seen on a second network path, and compares it with the IP our server sees for this connection, solely to detect whether the connection goes through a proxy. If they differ, a one-time language prompt is shown. We do not store that IP, do not link it to you, and do not use it to identify anyone. The probe depends on browser and network policy and may be unavailable. The connection IP used for the comparison is returned to your own browser by /api/ip and is not stored server-side.
Cloudflare, as our host, may set strictly necessary cookies (for example for security and load balancing). Those are required to serve the site.
13. Children
The site is not directed at children under 16. We do not knowingly collect data from them. If you believe a child has sent us personal data, contact us and we will delete it.
14. Changes and contact
We may update this policy; the current version is always on this page with its effective date. Material changes will be announced on the site.
Placeholders in curly brackets — company legal name, registered address and country — will be completed with the company's registered details before this version is treated as final.