Privacy Policy

Last updated: April 2026

What we collect

We do not collect personal information. When you sign a file, the media is sent to our signing server, cryptographically signed, and returned to you. We store only the file hash and verify link — not the file itself, not your name, not your email, not your IP address.

What we don't collect

No account required. No cookies. No tracking. No analytics. No advertising.

How signing works

Files are sent to api.truecapture.global for signing. The signed file is returned to you and saved to your device. We retain only a hash of the file (not the file itself) to enable verify link lookups.

Third parties

Public keys are registered on DeDi.global, a decentralised public key directory. No other third parties receive your data.

Open source

TrueCapture is open source. The full codebase is available at github.com/TanushkaCDPI/truecapture for independent verification of these claims.