Terms of Service

Last updated: April 2026

1. Service

InkSeal provides a web-based tool for creating InkSeal v1.0 proof packages containing a SHA-256 content hash and an RFC 3161 timestamp response. The verification tool is provided free of charge.

2. Seal service

The seal service creates a .proof package for a one-time fee. Payment is processed by Stripe, Inc. Refund requests: legal@inkseal.org.

3. Timestamp evidence

The seal service includes an RFC 3161 timestamp response from FreeTSA.org. FreeTSA.org is a free, non-qualified timestamp authority. The timestamp is included as evidence within the proof package but does not by itself constitute a qualified electronic time stamp under eIDAS, ZertES, or any other regulatory framework.

4. No legal guarantee

InkSeal does not guarantee:

• Legal qualification or court admissibility of the proof package
• Regulatory compliance in any jurisdiction
• Trust-service status of the timestamp provider
• Authorship, identity, or intent of the person creating the package
• Evidentiary weight in any legal proceeding

The proof package documents content identity and timestamp evidence at the base-format level. Any legal, regulatory, or evidentiary conclusion depends on the applicable law, the evaluation context, and additional evidence profiles.

5. File handling

Files are hashed locally in the user's browser using SHA-256. The file itself is never uploaded. Only the hash is transmitted to create the timestamp. No file content is stored by InkSeal.

6. Download availability

Proof packages are available for download for 24 hours after creation. After that, the package is deleted. InkSeal does not retain copies of proof packages.

7. Liability

The service is provided "as is" without warranty of any kind. InkSeal is not liable for any loss or damage arising from the use of the service, the proof packages, or the timestamp evidence.

8. Governing law

These terms are governed by Swiss law. Place of jurisdiction is Switzerland.

Privacy Policy

Last updated: April 2026

1. What we collect

InkSeal collects the minimum data necessary to provide the service:

• SHA-256 hash: Transmitted to the timestamp authority to create the RFC 3161 response. A hash cannot be used to reconstruct the original file.
• Payment data: Processed by Stripe, Inc. InkSeal does not see or store credit card numbers, billing addresses, or other payment details.
• Proof packages: Stored temporarily (up to 24 hours) for download, then permanently deleted.

2. What we do not collect

• File content (never uploaded)
• User accounts or profiles
• Cookies for tracking or analytics
• IP addresses for profiling

3. Third-party services

• Stripe, Inc. (payment processing) — Privacy policy
• FreeTSA.org (timestamp authority) — receives only the SHA-256 hash
• Netlify (hosting) — Privacy policy

4. Data storage location

The website and functions are hosted on Netlify. Temporary proof package storage uses Netlify Blobs. Stripe, Inc. processes payments in the United States.

5. Your rights

Since InkSeal stores no personal data beyond temporary proof packages (deleted after 24 hours), there is generally no personal data to access, correct, or delete. For questions, contact legal@inkseal.org.

6. Governing law

This privacy policy is governed by Swiss law, including the Swiss Federal Act on Data Protection (FADP/DSG).