Privacy Notice
Effective 2026-09-29
Who is responsible
Active Life Hub LLC operates Domain Name Proof and is responsible for the processing of information described here (the “controller” under data-protection laws that use that term).
What we process, and why
| Information | Purpose | Where / how long |
|---|---|---|
| Challenge data: the domain as you submitted it, its canonical form, the method, optional audience and nonce, timestamps | Issuing and checking the challenge | Not stored on our servers. It is sealed (encrypted and authenticated) inside the verification ID that we return to you. It stops being usable when the challenge expires after 48 hours. |
| Check results: DNS answers and HTTP responses from the domain’s public servers | Deciding whether the challenge is published | Processed in memory only. Fetched page content is never stored. Only the minimal evidence below is kept in an issued Proof. |
| Issued Proofs: domain, method, audience, nonce, timestamps and technical evidence (record name and value, nameserver names and IP addresses, URLs, final URL, server IP address) | Delivering and re-delivering the Proof you paid for | Our database, until 90 days after the Proof’s valid_until date; then the Proof document is deleted. |
| Payment and accounting records: proof ID, domain, method, amount, network, payer wallet address, transaction hash, timestamps | Accounting, tax, fraud prevention and dispute handling | Our database. Kept after the Proof document is deleted, for as long as needed for these purposes; they are not deleted automatically. |
| Request metadata: IP address, user agent, time, path, status code | Security, abuse prevention (rate limiting) and operating the Service | Rate limiting uses a hashed IP address held briefly in server memory. Our hosting provider keeps request logs for its standard log-retention period. We use no analytics or advertising trackers and set no cookies. |
| Browser storage on /verify | Letting you continue a verification in the same tab | The verification ID and access key are kept in your browser’s session storage and are removed when the tab closes. |
Domain names and technical evidence are usually not personal information. They can be when a domain or record identifies a person; we treat all of it with the same care. We do not ask for names, emails or identity documents, and we never ask for or accept wallet private keys or recovery phrases.
Who else processes information
- Vercel (hosting, content delivery, request logs).
- Neon (managed PostgreSQL database for issued Proofs and payment records).
- Cloudflare and Google public DNS-over-HTTPS resolvers (receive the domain names we look up during checks).
- Coinbase Developer Platform (x402 payment verification and settlement) and the Base blockchain, where payment transactions are public by design.
- The domain’s own nameservers and web servers, which receive our check requests and may log them.
These providers may process information in the United States and other countries. We do not sell information and do not use it for advertising or profiling.
Proofs you share
A Proof is designed to be shown to others. Anyone who has a Proof or its proof ID link can read its contents. Share them only with parties you want to rely on them.
Security
Challenge state is encrypted and authenticated; access keys and proof IDs are protected by keyed message authentication; proofs are signed with a key that never leaves our server environment; connections use HTTPS. No system is perfectly secure, and we cannot guarantee absolute security.
Your choices and rights
Depending on where you live, you may have rights to request access to, correction of, or deletion of personal information about you, or to object to or restrict certain processing. Because we do not collect account or contact details, include the proof ID or verification ID so we can find the relevant record. We may need to keep payment and accounting records where the law requires or permits it. You may also have the right to complain to a data-protection authority.
Changes
We will publish any changes to this notice on this page with a new effective date.
Contact
Active Life Hub LLC can be reached through the contact details it publishes for this Service.