Privacy policy
Proof of Data is built so that nobody, including us, can read what you seal. This page covers the little we do process, and your rights over it. Last updated 19 October 2026.
Who is responsible
The Proof of Data protocol operator ("we") runs this site, the waitlist and the house enclave. Write to the contact listed on our X account for any request below.
What you seal
Plates are encrypted in your browser to a key held only inside an attested Intel TDX enclave. We cannot read them in transit, on our servers or on the enclave disk. The enclave computes aggregates over at least 25 plates and releases only those aggregates and signed receipts. The public chain records each plate's ciphertext hash, type, size, enclave id and owner account; it never records contents.
What we process
- Waitlist: your email and the plate types you picked, to tell you when your wave opens. Kept until uploads open for you or until you ask us to delete it.
- Sign-in, once uploads open: the identifier from Google or your email, used to create your embedded account. We do not receive your Google password.
- Technical logs: IP address and request metadata kept by our host for up to 30 days for security. No analytics, no advertising trackers.
- Local storage: your cookie choice and, if you allow it, app preferences. See the cookies policy.
Legal bases (GDPR)
Under the EU and UK General Data Protection Regulation we rely on your consent for the waitlist and for sealing plates, on the performance of our terms for sign-in and payouts, and on our legitimate interest in security for technical logs. You can withdraw consent at any time; deleting a plate removes it from the next epoch and the next training.
Your rights
You have the right to access, rectify, erase, restrict and port your data, and to object to processing. Because plate contents are sealed, we can delete a plate's ciphertext and onchain eligibility, but we cannot read it to send it back to you; keep your own copy. Onchain records (hashes and accounts) cannot be erased from a public blockchain; they contain no contents. You may complain to your local data protection authority.
Transfers and processors
The enclave runs on Phala Cloud. The site is hosted on a global edge network. Where data leaves the EEA, we rely on standard contractual clauses.
Children
Proof of Data is not for anyone under 18.