Privacy notice

Files and browser storage

The app computes a SHA-256 digest in your browser. Its current flow does not intentionally upload the selected file or filename to ExactDraft, a backend, or storage service. A filename is used in the page while you work and is not written to the contract. Pending transaction hashes are kept in this browser tab’s session storage until a receipt is seen, the transaction is cancelled, or the tab session ends. They survive page reloads during that session. MDN explains session storage lifetime ↗. The app has no account system, application database, analytics service, or event indexer.

Public blockchain records

Submitting an agreement publishes its digest, wallet addresses, reference, timestamps, status changes, and transaction data to the selected public testnet. These records are permanent and can be read by anyone. A digest can be compared with a known or guessed document. Never put a person’s name, client identity, confidential title, or other sensitive details in the reference. Blockchain data cannot be deleted by ExactDraft.

Hosting, RPC, wallet, and explorer providers

Vercel hosts the website. Like other hosting providers, it may process request and device information. Vercel’s published privacy notice describes collecting information such as IP addresses, telemetry, request information, and log files. Vercel’s documentation says Hobby runtime logs are retained for one hour and build logs are stored indefinitely; check the project’s current plan and settings for the applicable limits. The browser also sends chain queries to the selected public RPC and opens wallet and block-explorer services when you use those features. RPC operators can observe request metadata and timing, and their current retention terms have not been independently confirmed for this demo. Review each provider’s own notice before use.

Vercel Privacy Notice ↗ · Vercel log retention documentation ↗

Use and limitations

Use synthetic files and test wallets only. ExactDraft records wallet calls for a digest; it does not verify identity, authority, possession or reading of a document, and it is not an electronic-signature service. This demo has no dedicated support or privacy contact or incident-response owner. Do not rely on it for production or high-stakes use.