The short version: this site collects nothing about you, and the receipt you check never leaves your computer. That is not a promise you have to take our word for, which is the point of the rest of this page.
The receipt you check never leaves your machine. A file you choose is read in the browser with the File API, verified with WebCrypto and then forgotten when you close the tab. There is no application backend to send it to: this page is static files, and checking a receipt calls nothing.
Loading the page is a different matter, and saying "nothing leaves your machine" would gloss over it. Fetching these files is an ordinary web request to the host described below, exactly like any other page. What that host cannot see is the receipt, because checking it never becomes a request.
While the page is open it is forbidden from making any network
request. Its content security policy sets connect-src 'none',
which the browser enforces regardless of what the page tries to do,
and you can watch that hold by disconnecting from the network and
checking a receipt anyway. The policy is served in
the repository's _headers file,
where you can read it.
No accounts, no cookies, no local storage, no analytics, no tracking scripts and no third-party embeds. We do not know who visits this site or what anyone verifies.
The site is served as static files by Cloudflare Pages. Like any web host, Cloudflare processes the ordinary metadata of an HTTP request, including your IP address, user agent and the file requested, in order to deliver the page and protect against abuse. That is a consequence of loading any web page and it applies to the page itself, not to any receipt you check afterwards. Cloudflare's handling is described in its privacy policy.
If you would rather not involve us or our host at all, build the verifier yourself and run it locally. It is one command and the output is plain files.
The site is not directed at children and collects no personal data from anyone, of any age.
If this page changes, the date above changes with it, and the history of every edit is public in the repository.
Questions: privacy@adastracomputing.com
Security reports: security@adastracomputing.com