Privacy
Your data, and what we do with it
The founding principle of the service is that a file does not need to be transmitted to be timestamped. Our data policy follows the same logic: collect only what is strictly necessary.
What we never receive
The SHA-256 fingerprint is computed at the time of deposit, before anything is sent. For the free deposit, the file is then securely transferred to our storage provider — solely so you can retrieve that deposit later if you open an account with the same email address. This transfer happens directly from your browser: it never passes through our own servers.
Processing
What we process, and why
Filing a proof
Fingerprint, timestamp, title and description you enter, and the identity of the depositor and declared authors. A fingerprint of the author details (name and email) is recorded with the file fingerprint in a public registry: it cannot be used to recover these details, and it cannot be removed from the registry. Anyone who has the file and verifies it can see the declared authors, unless they are anonymised.
Legal basis
Performance of the contract.
Retention
For the lifetime of the proof — this is the very purpose of the service — unless you expressly request erasure.
Account and billing
Email address, login credentials, accounting records.
Legal basis
Contract and legal obligation.
Retention
For the duration of the account, then ten years for accounting records.
Billing follow-ups
Email address, first name, payment status, and the history of reminders sent in the event of a failed payment.
Legal basis
Performance of the contract.
Retention
For the duration of the follow-up process, then in accordance with accounting retention periods.
Contact requests
Your contact details and a description of your situation.
Legal basis
Pre-contractual steps.
Retention
Three years after the last exchange.
Questions asked to the guidance assistant
The sentence you enter, without any identifier or profiling, used to identify topics worth documenting.
Legal basis
Your consent, revocable at any time.
Retention
Thirteen months, or until you erase it yourself.
Anti-bot verification
A calculation run by your browser. No data is collected, no third-party service is called.
Legal basis
Legitimate interest — security of the service.
Retention
None.
Your choices
What is stored in this browser
You can view, export and erase this data without writing to us.
The data stored in this browser has been erased.
Your rights
What you can demand
Access and portability
Obtain a copy of your data in a readable, reusable format.
Rectification
Correct inaccurate data. Note: a timestamped fingerprint cannot be modified. That is what gives it its value.
Erasure
On express written request to contact@ipocamp.fr (erasure is not offered directly in your area): erasure of your account, files, certificates and personal data, once you have been able to download everything. We will no longer be able to provide them afterwards. The fingerprint recorded in the public ledger cannot be removed; it does not make it possible to recover your data. Accounting records remain retained for ten years.
Objection and withdrawal
Withdraw your consent at any time, without affecting what was done beforehand.
Restriction
Freeze a processing operation while a challenge is being reviewed.
Complaint
Contact the CNIL if our response does not satisfy you. This right is yours unconditionally.
Post-mortem directives
Decide, during your lifetime, what happens to your personal data after your death: whether it is kept, erased, or communicated to a third party you designate.
Hosting
Account and deposit data (contact details, fingerprint, date): France and the European Union. Stored files: encrypted, then split into fragments distributed across the Storj decentralized storage network, some of whose nodes may be located outside the European Union. A single fragment cannot be used to rebuild the file.
Subprocessors
Public registry of the Tezos blockchain (it only receives fingerprints, never plain-text data), hosting provider, encrypted, decentralized file storage (Storj), Stripe (payment provider — see stripe.com/privacy), Plausible (privacy-friendly, cookie-free website analytics). The full list is available on request.
Write to us
dpo@ipocamp.fr — response within one month, in accordance with the regulation.