1. Scope

This policy applies to all services at suprastructure.net, including the free portal, public proofs, contact form, and production engagements.

2. What we collect

The free portal requires no account and no personal information. If you provide an email address for proof delivery or via the contact form, we use it only for that purpose. IP addresses are used for rate limiting and are not persisted beyond the rate-limit window.

3. Public proofs

The proof record is append-only. Only opaque SHA-256 hashes are published at /proofs. No email addresses or personal data appear in public proofs.

4. Production engagements

Engagements collect: contact email, artifact metadata (component count, format), and any information provided in the statement of work. This data is used solely for engagement delivery and is not published.

5. Payment processing

When applicable, billing is handled by Stripe. We do not store payment card details.

6. Email

Transactional emails (proof delivery, engagement confirmations, contact replies) are sent via Resend. We do not send marketing email.

7. Cookies and tracking

No analytics scripts, no pixel trackers, no fingerprinting. Cloudflare Turnstile is used for bot protection on forms.

8. Data retention

Email addresses provided for proof delivery are not stored beyond the delivery receipt. The proof record is append-only and permanent. Rate-limit counters expire automatically.

9. Your rights

You may request deletion of any personal data we hold by contacting us. Proof entries (opaque hashes only) are permanent.

10. Children

The Service is not directed to individuals under 18.

11. Contact

Privacy questions: contact us.