Privacy policy

• non-custodialwe never take custody of your Bitcoin or keys; cryptographic operations happen in your wallet or browser
• minimal collectiononly what is necessary to provide the Service; no user profiles, no cross-web tracking
• optional accountmost of the Service needs no sign-in; optional sign-in uses a Bitcoin signature, an email code, or Google/GitHub — never a password
• transparencyplain-language policy; ask us anything at hello@ochk.io

• >>No custody of funds and no access to private keys
• >>No account required for the core service
• >>No selling or renting of personal information, ever
• >>No targeted advertising and no cross-site tracking
• >>No third-party analytics trackers — privacy-preserving analytics only

information you provide

Bitcoin addresses and signatures are processed client-side to generate a cryptographic proof; this data is public by design. Identity bindings you add are included in the signed message and are public. Messages you send us — through the contact form or by email — reach our inbox through our email provider (Resend) and are kept only as long as we need them to reply.

if you sign in

• accountan opaque did:oc identifier, an optional display name and Nostr npub, and when the account was created and last signed in
• how you sign ina Bitcoin address you prove with a signature (stored as is — it is public on-chain anyway); or, for an email code, Google or GitHub, the verified email address — encrypted at rest, plus a one-way hash of it so we can find your account
• passkeysfor each passkey you register: its public key, a label, the transports it reported, and when it was added and last used
• each sessiona hash of the session token, the IP address and full user-agent string of the device that opened it, and timestamps
• sign-in logeach sign-in and each identity you link or remove, with the IP address and user-agent at the time — kept for security
• when you first sign inOrangeCheck’s operators get an email, sent through our email provider (Resend), naming your did:oc and the identity you signed in with: your Bitcoin address or your email address
• nevera password, a private key, or a seed phrase

automatically collected

• ip addresssecurity, rate limiting, service delivery
• browser/devicecompatibility and UX optimization
• pages visitedaggregate, to improve the Service

cookies & analytics

• oc_sessionyour sign-in, set by ochk.io for every *.ochk.io site: HttpOnly; Secure; SameSite=None; Domain=.ochk.io; 30 days
• oc_oauth_stateonly during a Google or GitHub sign-in: HttpOnly; SameSite=Lax; 10 minutes; deleted when the sign-in completes
• oc_theme · oc_skin · oc_motionyour light/dark, appearance and reduced-motion choices (Domain=.ochk.io); not used to identify you

A browser tab may also keep its own copy of a sign-in token in session storage, cleared when the tab closes. We use Plausible Analytics — cookie-free, no personal data, aggregate statistics only — alongside our own first-party, cookieless analytics (oc insights): no cookies, no cross-site identity, your IP address is hashed and immediately discarded (never stored), and Do-Not-Track / Global Privacy Control signals are honored. No advertising or tracking cookies.

• >>Generate and verify cryptographic proofs and serve verification pages
• >>Detect and prevent abuse, spam, and denial-of-service attacks
• >>Fix bugs, optimize performance, and improve the Service
• >>Provide technical support

• public artifactspermanent and publicly shareable; data published to Nostr cannot be deleted by OrangeCheck
• request logsheld by our hosting provider (Vercel) for its own short retention window; we keep no separate copy
• sessionsdeleted when you sign out. A session that simply expires after 30 days is not yet deleted automatically.
• account, sign-in identities, passkeys and sign-in logkept until you ask us to delete them at hello@ochk.io; there is no automatic deletion yet
• support emailsretained as long as necessary; deleted on request

• >>HTTPS encryption for all data in transit
• >>Secure hosting with regular security updates
• >>Rate limiting and abuse monitoring

No method of transmission or storage is 100% secure. We use reasonable measures but do not warrant the security of your data and are not liable for unauthorized access, loss, or theft — see the Terms of Service. If we become aware of a breach of personal data we hold, we will notify affected users and any competent supervisory authority as required by applicable law, including the 72-hour window under Article 33 of the UK & EU GDPR.

• access & portabilityrequest a copy of your personal information in a machine-readable format
• correctionrequest correction of inaccurate or incomplete information
• deletionrequest deletion of personal information we hold (data published to public networks cannot be deleted by us — see retention)
• objectionobject to or restrict processing in certain circumstances
• withdraw consentwithdraw consent where consent is the legal basis for processing

To exercise any right, email hello@ochk.io. We respond within 30 days.

OrangeCheck is operated from the United States. If you access OrangeCheck from elsewhere, your information may be transferred to, stored, and processed in the US or other countries where our service providers operate. For users in the EEA, UK, or Switzerland, we rely on appropriate safeguards for international transfers.

california (ccpa / cpra)

• >>Right to know the categories of personal information collected
• >>Right to delete and to correct your personal information
• >>Right to opt out of sale or sharing — we do not sell or share personal information
• >>Right to limit use of sensitive personal information — we do not collect sensitive PI as defined by the CPRA
• >>Right to non-discrimination for exercising your rights

europe (gdpr) & united kingdom (uk gdpr)

• legal basisconsent, contract performance, legitimate interests (security, abuse prevention, service improvement), and legal obligations
• your rightsaccess, rectification, erasure, restriction, portability, objection, and withdrawal of consent
• supervisory authorityright to lodge a complaint with your local EU/EEA data-protection authority, or the UK ICO
• eu/uk representativeif and when required, we will designate an Article 27 representative and publish the details here

other jurisdictions

If you reside in a jurisdiction with a comprehensive privacy law — including Brazil (LGPD), Canada (PIPEDA / Law 25), Australia, Japan (APPI), South Korea (PIPA), Switzerland (FADP), or any U.S. state privacy law — you have the equivalent rights of access, correction, deletion, portability, and objection. Email hello@ochk.io and we will honour applicable rights under the law of your residence.

OrangeCheck is not intended for children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have, email hello@ochk.io immediately and we will delete it.

• >>We will update the "last updated" date above
• >>For material changes, we will provide prominent notice on the website
• >>Continued use after changes constitutes acceptance