Your data stays on your device.
The short version. Obsign's tools — enhancement, forensic analysis, and verification — run entirely in your browser. The images, files, and receipts you work with are never uploaded. We set no advertising cookies and run no third-party trackers; the only usage data we collect is cookieless and content-free, described below.
What we don't collect
The interactive features on this site are client-side by architecture. When you drop a photo into the
Living Proof page, run the forensic examiner, or paste a
receipt into the verifier, that content is processed locally and discarded when you
leave. Your images, files, and receipts are never among the things the page sends out: its only
outbound requests are the cookieless page beacon and a short list of content-free interaction signals
(described below), and the page's network policy (connect-src) permits no other destinations.
What the server sees
The site is served from Cloudflare's edge. As with any website, our hosting provider processes standard request metadata (IP address, user agent, requested URL, timestamp) to deliver pages and protect against abuse. We do not use this for advertising or profiling, and we do not sell it. These logs are retained only as long as needed for security and operations.
Analytics — cookieless and content-free
We measure how the product is used so we can improve it — without cookies, and without ever touching your content. Two first-party signals, nothing else:
- Page views, via Cloudflare Web Analytics: cookieless, no cross-site identifiers, no fingerprinting — aggregate counts, referrer, and country.
- Content-free interaction events, sent to our own endpoint: an allowlisted signal that something happened (for example, a proof was run or a receipt was downloaded) — never the image, the receipt, or its contents, and never an identifier for you.
Both are first-party (our own Cloudflare), so there are no third-party trackers. We honor Do Not Track and Global Privacy Control: if your browser sends either, the interaction events are not sent at all.
Email you send us
If you email us (for example to become a design partner or report a security issue), we keep that correspondence to reply and follow up. Nothing more.
Your choices
- Use the tools without an account — there is nothing to sign up for.
- Request a copy or deletion of any correspondence you've sent us.
- Block scripts entirely; the verifier and analyzers simply won't run, and still nothing is sent.
Changes
If this policy changes materially, the effective date above changes and the update is noted in the changelog.
Contact
Questions about privacy: josh@coherenceenergylabs.com.