Privacy policy

Summary

Internet Identity Card ™ is a privacy-by-design product. The application is a single HTML file that runs entirely in your browser. We do not operate any server that handles your identity data. We do not have a database. We do not have user accounts. Your data never leaves your device.

This Privacy Policy explains how the limited data we may receive (through the website itself) is handled. It also covers the IIC TSA time-stamping service at tsa.internetidentitycard.com (section 3.4), which receives the hash of a file, never the file, and keeps no record of that hash. VerifBox (verifbox.com), a service of the same company, has its own privacy policy.

1. Data controller

The data controller for the website internetidentitycard.com is:

2. The Internet Identity Card application

The IIC generator is a self-contained HTML file you download from this website. Once downloaded:

• It runs locally in your browser, with no internet connection required.
• All identity data you enter (name, email, photo, social links, etc.) stays in your browser's local storage.
• Encryption (AES-256-GCM, with keys derived by Argon2id — RFC 9106, 96 MiB, t=4, p=4) is performed locally using the W3C Web Crypto API.
• No telemetry, analytics, or tracking is embedded in the application.
• The Content Security Policy default-src 'none' structurally prevents the application from contacting any server.

We never see, store, or process any identity data you enter into the IIC application.

3. Data we may receive

3.1 Server logs

When you visit this website, our hosting provider may automatically record:

• Your IP address (truncated where possible)
• The date and time of your visit
• The pages requested
• Your browser type and language
• The referring URL (if any)

These logs are used for security, technical diagnostics, and to detect abuse. They are kept for a maximum of 30 days.

3.2 Email correspondence

If you contact us at contact@internetidentitycard.com, we will receive your email address and the content of your message. We use this information solely to respond to your enquiry.

3.3 Cookies

This website sets no cookies and uses no trackers. It keeps in your browser only an offline copy of its own pages (a service worker and the browser's cache storage, so the site opens without a connection) and, if you use it, the IIC generator's own local storage; neither contains anything about you. See our Cookie Policy for details.

3.4 IIC TSA time-stamping service (tsa.internetidentitycard.com)

IIC TSA is an RFC 3161 time-stamping service we operate (token issuance currently available to VerifBox only; public access on request) (see the IIC TSA page and its terms of use). When a client sends a request:

• What we receive: the hash of the client's data (SHA-256, SHA-384 or SHA-512) and, optionally, a random nonce. We never receive the document itself, its name or any identity information; no account is needed.
• What we keep: an issuance log with, for each token, its serial number, the time of issue, the key generation, the clock state, whether a nonce was present (yes/no) and the SHA-256 of the token's signature. It does not contain the hash submitted, the nonce value, the request body or the client's IP address, so it holds no personal data. It is kept for 12 years in a Google Cloud Storage bucket with a retention policy (the irreversible lock of that policy is scheduled after the first weeks of operation), and its daily digests are time-stamped by a third-party time-stamp authority and anchored in the Bitcoin blockchain; those third parties receive only the digest of the day's log, never client data.
• IP address: held in memory for about one minute, solely to enforce the rate limit (erased with the first request received after that period, and at the latest when the server instance stops), and not written to any log we keep. A refused public request (HTTP 403) is counted in aggregate only. Request logging of the hosting platform (Google Cloud Run) is excluded for this service because it would contain client addresses.
• Telemetry: aggregate counts (requests, rejection codes, latency) without request bodies, hash values, nonces or IP addresses.
• Where: Google Cloud, region europe-west1 (Belgium). The service queries four public time sources (PTB, Akamai, Google, Cloudflare) to check its clock; those queries carry no client data.

The IIC TSA issuance log and the time-stamp tokens are not "identity data" in the sense of section 2: they are operated online, by us, under the conditions above.

4. Legal basis for processing (GDPR)

• Server logs: legitimate interest (security and reliability of the website)
• Email correspondence: your consent (you initiated the contact)
• Strictly necessary cookies: exempt from consent under the ePrivacy Directive
• IIC TSA service: legitimate interest (operating, securing and keeping the evidential record of the time-stamping service); the issuance log contains no personal data

5. Data sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes.

We may share limited data with:

• Our hosting provider (server logs, exclusively for technical operation)
• Google Cloud, as processor for the hosting of this website (Firebase Hosting) and of the IIC TSA service (Cloud Run, Cloud KMS, Cloud Storage, region europe-west1)
• Law enforcement, when required by a valid legal request under English law

6. Your rights (UK GDPR / EU GDPR)

If you are located in the UK or European Union, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Request data portability
• Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk ↗) or your local supervisory authority

To exercise these rights, email contact@internetidentitycard.com.

7. Data retention

Server logs: 30 days maximum. Email correspondence: kept for as long as necessary to respond to and document the enquiry, then deleted. IIC TSA issuance log (no personal data): 12 years. IIC TSA client IP addresses: about one minute, in memory only.

8. International transfers

Our hosting provider may be located outside the UK or the EU. Where this is the case, transfers are protected by appropriate safeguards such as Standard Contractual Clauses or adequacy decisions of the UK and the European Commission. The IIC TSA service runs in Google Cloud's europe-west1 region (Belgium); the provider's data processing terms, including their transfer safeguards, apply.

9. Changes to this policy

We may update this Privacy Policy from time to time. Significant changes will be reflected in the "Last updated" date at the top of this page.

10. Contact

For any privacy-related question, contact:

HTTPS CARD — INTERNET IDENTITY CARD LIMITED
124 City Road, London EC1V 2NX, United Kingdom
Email: contact@internetidentitycard.com