Privacy.
This page describes how Atesta is designed to handle information. It is a working draft written by the project, not by a lawyer, and it must be reviewed before any public launch. It does not claim compliance with any law or certification.
What the product is designed to keep, and where.
What this build collects today
Nothing. Sign-up is not open, the site sets no cookies, and it uses no analytics or third-party tracking. The digest check on the home page runs entirely in your browser; what you type there is not sent anywhere.
What accounts will hold
- Your email address and sign-in details, used only to run your account.
- The profile you write: name, username, bio, links and skills. Public only if you make your profile public.
- Your contribution claims and evidence links. Drafts and pending claims are visible only to you and to reviewers of the organisation you submit them to.
- Reviewers’ private notes, visible only inside the organisation that wrote them.
What is written to NEAR
Only an attestation’s identifier, its digest, the issuing organisation’s NEAR account and whether it has been revoked. No name, email address, claim text, evidence link or note is written on-chain.
A public blockchain cannot be edited. Revoking an attestation marks it as revoked; it does not remove the earlier entry.
Leaving
Accounts will be able to export their data and request deletion. Attestations an organisation has already issued remain checkable in the minimal form needed to keep the public record honest, because they are the organisation’s statement as well as yours. This will be explained again at the point of deletion.
Before launch
A data controller, a contact address, retention periods and the legal bases for processing are not yet defined. They need a qualified person’s review and are deliberately not invented here.