Privacy policy
This website has no accounts, no forms and no cookies. It counts visits with cookieless Google Analytics. Last updated November 2, 2026.
Who this policy is from
This policy covers openproofing.org, the website of the Open Proofing Foundation, a Washington nonprofit corporation. Questions and requests go to hello@openproofing.org.
What the website collects
The website does not ask for your name, email address or any other personal detail, and it sets no cookies.
Google Analytics
The website counts visits with Google Analytics in a cookieless mode. On every page, consent for analytics and advertising storage is denied before Google's script loads and is never granted, so Google sets no cookies, Google signals are off, and no advertising profile is built from your visit.
For each page view, your browser sends Google the page address, the page you came from, your browser and device type, your screen size and the time. Google derives an approximate location from your IP address; Google states that Google Analytics 4 does not log or store IP addresses. Google reports these page views to the Foundation only in aggregate.
Google processes this data under its own privacy policy, including its policy for sites that use its services: policies.google.com/technologies/partner-sites.
Hosting
Cloudflare serves the website. Like any web host, it processes your IP address and the details of each request to deliver pages and protect the service, under Cloudflare's privacy policy. The Foundation does not export or store these request logs.
Tools that run in your browser
The evidence record verifier runs entirely in your browser. What you enter in it is not sent anywhere.
The plan builder keeps your selection of proofs in the page address so a plan can be shared as a link. That address is part of the page view Google Analytics receives. It contains proof names only, never personal details.
If you write to hello@openproofing.org, your message is kept in the Foundation's email, provided by Google Workspace, for as long as needed to answer it and to keep a record of the correspondence.
Identity proofing is separate
This policy covers the website only. The Foundation's SDK, registry router, recovery vault and credential issuer are not yet released; each will publish what it handles when it is. How they are designed to treat personal data is described on the For people page and in the evidence record specification.
Children
The website is not directed at children under 13 and does not knowingly collect information from them.
Your choices
Because the website sets no cookies and the Foundation keeps no personal data from it, there is usually nothing for the Foundation to access, correct or delete. You can block Google Analytics with your browser's tracking protection or with Google's opt-out add-on at tools.google.com/dlpage/gaoptout. For any question or request, write to hello@openproofing.org.
Changes
When this policy changes, the date at the top of this page changes with it.