Privacy notice
Draft version v0-draft. This text is a placeholder and must be replaced with a version approved by legal advisers before real participants are invited. Accepted consent records store the document type, version and content hash.
What this panel never collects
- Identity document images of any kind
- Document numbers or machine-readable field values
- Your full date of birth
- Proof-of-address files, images, or the address printed on them
- Selfies, liveness recordings, face images or biometric templates
- NFC chip contents
- Raw verification responses containing identity information
What this panel does record
- Your email address, display name, language and time zone
- Country of residence and document issuing country
- Adult confirmation, and an optional age band if you choose to give one
- Document category, approximate issue year, and whether NFC is expected
- Proof-of-address category and capture method — never the document
- Device manufacturer, model, operating system, browser and NFC capability
- Assignment, test, review and reward status
Free-text fields
Wherever you can type freely, do not enter names, addresses, document numbers, dates of birth or other information printed on your documents. Every free-text field in the app repeats this warning.
Retention
Retention periods are configured per record category. Financial and audit records are retained as required by law; where deletion conflicts with that, operational records are anonymised instead. All documents submitted inside the verification journey are destroyed no later than 3 months from submission.
Your rights
You can request access, correction, consent withdrawal or account deletion from the privacy requests page once signed in. Every export and deletion action is written to the audit trail.