Privacy notice · October 12, 2026

Local by design. Minimal by default.

This notice explains what the Attestome static prototype processes in your browser and what it deliberately does not collect.

1. Scope

Attestome is a client-side prototype for non-clinical research artifact receipts. This notice covers the public website, receipt studio, Web3 workspace, and downloadable builder assets.

2. Local file processing

When you choose a file, supported browsers read it into memory to compute SHA-256. Attestome does not upload the file, its contents, or its directory path to an application server. File processing is limited to 25 MiB in this release. Closing or refreshing the page clears in-memory state.

The exported receipt may contain the file’s base name, size, media type, last-modified time, digest, and metadata that you entered. You decide whether and where to save or share that JSON file.

3. Information you enter

Artifact titles, research identifiers, contributor claims, tags, dates, and related fields are processed locally to generate a receipt. Do not enter patient-identifying data, clinical records, credentials, secrets, private access information, or other regulated or confidential material.

4. Wallet information

Wallet connection is optional and occurs only after you select Connect Wallet. If a compatible injected provider is present, it may return a public account address and chain identifier. Those values are displayed locally and can be included as optional context in an unsigned envelope. Attestome does not request signatures, approvals, network changes, or transactions.

5. Browser storage

Local storage may hold a points state namespaced to the connected public address and chain. Session storage may hold a compact receipt digest for continuity during a tab session. The prototype does not intentionally persist source research files or their contents.

6. Hosting and network metadata

The hosting provider may process ordinary request information such as IP address, user agent, requested path, timestamps, and security logs to serve and protect the site. That infrastructure processing is separate from the local artifact workflow. Attestome does not add analytics or advertising trackers in this release.

7. Your controls

  • Use the product without connecting a wallet.
  • Decline to select a source file and create a clearly marked metadata-only receipt.
  • Refresh or close the tab to clear in-memory state.
  • Delete exported JSON files using your device controls.
  • Clear site storage in your browser settings to remove local points state.

8. Children, clinical data, and regulated use

This prototype is not directed to children and is not designed for medical care, clinical records, human-subject consent, or regulated health data. Do not use it where a specialized legal, security, archival, or compliance system is required.

9. Changes

Material changes to processing behavior should be reflected in this notice and its date. A future hosted account, collaboration service, storage integration, signing feature, or anchoring integration would require a new privacy review before release.