Privacy

Certification files are encrypted at rest before upload and are only ever decrypted server-side to serve an authorized request.

QR scan analytics store a salted hash of the visitor's IP address, never the raw address, along with coarse geography derived from it, user agent, and referrer.

This page is a placeholder — replace it with your organization's actual privacy policy before launch.