Privacy Policy
Last updated: 29 August 2026
Who's responsible for this data
Sovereign Scrubber is operated by an individual based in the Netherlands. For anything in this policy — questions, requests, complaints — reach us via the request form.
What we collect, and why
The "Request access" form (name, email, message): submitted directly to Web3Forms, a third-party form-processing service, which relays it to our email inbox. We use it only to respond to your request and send you access credentials. Legal basis: your consent, given by submitting the form. It isn't stored in any database we run — it lives in our inbox for as long as we need it to respond, and we delete it at our discretion afterward.
Text submitted to the scrubbing tool itself: not stored, logged, or retained anywhere. It's processed in memory to produce the redacted output and a hash-based receipt, then discarded. This is how the code is actually written, not just a promise.
Basic security logs: failed login attempts to the demo tool are logged together with the IP address they came from, solely to detect abuse. Our hosting providers (Railway, Vercel) also generate their own standard connection-level logs (IP address, timestamp, request path) as part of normal web server operation — this is true of virtually any website and outside our direct control.
Cookies: none are set. This site remembers a light/dark theme choice using your browser's local storage, which stays on your device and is never sent to us.
What we don't do
- No user accounts or sign-ups
- No cookies or tracking scripts
- No storing or logging the text you submit to be scrubbed
- No selling or sharing your data for advertising
- No analytics on this site
Who we share it with
Only the service providers needed to run this project:
- Web3Forms — processes the request-access form
- Railway — hosts the scrubbing tool and API (EU region)
- Vercel — hosts this website
We don't sell your data, share it for advertising, or use it for anything beyond what's described above.
International data
The scrubbing tool itself runs on servers physically located in the EU. This website and the third-party services above may process data on infrastructure outside the EU depending on their own setup — we haven't audited every processor's exact data residency in detail, and recommend checking their own privacy policies if that matters to you.
How long we keep it
Access-request emails are kept only as long as needed to respond, then deleted at our discretion — given the small, manual scale of this project right now, we don't yet commit to a fixed retention schedule. Scrubbed text is never retained at all. Failed-login IP logs follow our hosting providers' standard log retention, which we don't directly control.
Your rights
Under GDPR, you can ask to access, correct, or delete your data, or object to how it's processed. Use the request form for any of this.
Changes
This is an early-stage project and this policy will change as it develops. Check back here for updates.
Contact
Use the request form on the homepage — it reaches us directly, no domain or account needed.