Privacy Policy

Last updated: September 2026

1. What we collect

To run your TitleDrive account, we collect:

• Your email address and a hash of your account password, so we can reach you and let you log back in. Your password is never used to sign anything -- only a titleholder passkey, or an issuer's own signing key, can do that.
• An optional display name and, once you add a passkey, an optional device label for it.
• The public half of any WebAuthn passkey you register. Your private key never reaches our servers -- for a titleholder passkey, never; for an issuer's signing key, only if you chose server-held key custody, in which case we hold it so we can sign on your behalf.
• Physical-tag-binding details you or an issuer add to a title (tag type, origin, and similar metadata) -- never the raw ID printed on a physical tag itself.
• Basic request logs (timestamps, IP address) kept only for security and rate-limiting, not for tracking or advertising.

2. What's public versus what's private

Once you sign and submit a title event, that event and its metadata are published permanently to a public archive and anchored to a public blockchain. That's the whole point of TitleDrive: anyone can independently verify a title's history without trusting us. Published events cannot be edited or deleted -- not by you, and not by us.

Your account details (email, display name) are different: they're kept only in our own database, never published to the archive, and can be deleted on request, subject to Section 4 below.

3. How we use your data

To operate your account (login, notifications about a title reaching you or needing your attention), to run the service (rate limiting, security alerts, fraud/clone detection on physical tags), and to respond to you when you contact us. We don't sell your data, and we don't use it for advertising.

4. Your rights

You can ask us to see, correct, or delete the account data we hold about you (email, display name, and similar account fields) by writing to info@titledrive.app. We can't delete or alter anything already published to the public archive -- that's inherent to how a tamper-evident, independently verifiable history works, not a choice we can override on request.

5. Cookies

We use a single session cookie to keep you signed in. We don't use advertising or third-party tracking cookies.

6. Third parties

We don't share your account data with third parties, other than the infrastructure that keeps TitleDrive running (hosting, email delivery). Title events you sign are, by design, published to the public archive and a public blockchain -- see Section 2.

7. Changes to this policy

We may update this policy as the service develops. Material changes will be reflected by an updated "Last updated" date above.

8. Contact

Questions about this policy, or a request under Section 4: info@titledrive.app.