In short
- Controller: forehead s.r.o., Prague
- Data stored in the Czech Republic (EU); exceptions in section 6
- Analytics only with your consent
- We do not sell personal data or use it for advertising
- Deleting your Account deletes captured content and removes the link to you; proof hashes stay verifiable
1. Controller and contact
1.1 The controller of your personal data is forehead s.r.o., Jaurisova 515/4, Michle, 140 00 Praha 4, Czech Republic, Company ID 21908117, registered in the Commercial Register kept by the Municipal Court in Prague, file C 407991, operator of GetProofAnchor ("we", "us").
1.2 For all data protection matters, contact us at hello@getproofanchor.com or by phone on +420 722 428 407 (also WhatsApp) or by post at the address above. We have not appointed a data protection officer, as we are not obliged to do so; your requests are handled directly by the management.
1.3 This policy applies from 20 October 2026. It is provided in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and the Czech Act No. 110/2019 Coll. on personal data processing.
2. Whose data we process and in what role
2.1 This policy concerns these groups of people:
- customers and users of the Platform (Account holders and members of team workspaces);
- website visitors;
- buyers of Assisted Capture (without an Account);
- Forensic Browser licensees and their users;
- people who contact us (e-mail, contact page, WhatsApp);
- business contacts of companies and organisations we address or cooperate with;
- people whose data appears in captured content, for example the authors of posts or the operators of websites.
2.2 For the data of customers, users, visitors, buyers, licensees and business contacts we are the controller. For personal data contained in content our customers capture or submit, the customer is the controller and we are its processor (section 4). Exceptions: (a) where a consumer captures content solely for purely personal purposes outside the scope of the GDPR, we act as controller for that data and process it to provide the Service on the basis of legitimate interest (Art. 6(1)(f) GDPR); (b) we act as controller for retaining hashes and proof-log entries after deletion (section 8) and for data needed to prevent misuse of the Service.
3. What data we process, why and on what legal basis
3.1 The table summarises the purposes, data, legal bases under Article 6(1) GDPR and the retention periods (details in section 7).
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Account, sign-in and provision of the Platform | e-mail, account ID, password hash (if set), plan, credits and quota usage, workspace and team roles, sign-in and session tokens, API keys (as hashes) | performance of a contract, Art. 6(1)(b) | while the Account exists; anonymised on deletion |
| Proofs you create | URL, page title, capture metadata, publication and revocation state (the captured content itself see section 4) | performance of a contract, Art. 6(1)(b) | while the Account exists; after deletion only hashes and timestamps without any link to you (section 8) |
| Payments, invoices and tax | name, e-mail, billing address, VAT ID, plan, amounts, Stripe customer and subscription IDs (card data is processed only by Stripe) | performance of a contract, Art. 6(1)(b); legal obligation (VAT and accounting), Art. 6(1)(c) | 10 years from the end of the tax year |
| Assisted Capture orders | e-mail, URLs to capture, your notes, optional phone and company or VAT ID, payment status | performance of a contract, Art. 6(1)(b); legal obligation (tax documents), Art. 6(1)(c) | for as long as the delivered proofs exist, and at least 10 years (tax documents) |
| Forensic Browser licences | licence contact e-mail, organisation name, licence key (stored only hashed and encrypted), Stripe IDs, device fingerprints (hashed) and device labels, user names of the application, stamp log (hash, time, device, user) | performance of a contract, Art. 6(1)(b) | for the term of the licence and as long as the records of the stamps issued under it exist; tax documents 10 years |
| Proof logs (chain of custody): creation, access and viewing, verification and revocation of proofs | event type and time, IP address and browser identification (user agent), referring page | legitimate interest in documenting the chain of custody of the evidence and in security and abuse prevention, Art. 6(1)(f); you may object (section 9) | for as long as the proof exists; proof owners do not see the IP addresses of people who view or verify their proofs |
| Security and operation | server logs (IP address, time, requested URL, user agent), application and error logs, rate-limiting counters | legitimate interest in security, Art. 6(1)(f) | web server logs 30 days, application logs 90 days |
| Website analytics (Google Analytics 4) | pseudonymous online identifiers, pages visited, device and approximate location data | consent, Art. 6(1)(a) | user- and event-level data at most 14 months; aggregated reports without personal data without time limit |
| Communication and support | name, e-mail, phone, content of messages | contract or pre-contractual steps, Art. 6(1)(b); legitimate interest in answering enquiries, Art. 6(1)(f) | 3 years after the last communication |
| Business contacts and B2B outreach | name, role, organisation, business e-mail and phone from public sources (company websites, registers) or from you, communication history. We send commercial e-mails only with consent or to existing customers under section 7 of Act No. 480/2004 Coll.; otherwise we may contact you once through other channels (e.g. phone, post, LinkedIn). | legitimate interest in presenting our services to organisations, Art. 6(1)(f); for e-mail communications consent, Art. 6(1)(a) | until you object or 2 years without a response; an opt-out entry (e-mail only) is kept to honour your objection |
| Legal claims and compliance | data relevant to a dispute, request or regulatory obligation | legitimate interest in establishing, exercising or defending legal claims, Art. 6(1)(f); legal obligation, Art. 6(1)(c) | for the duration of the matter and the limitation period |
| Newsletter (product news and practical guides) | e-mail address, language and address of the page where you subscribed, time of consent and confirmation, and how you gave it (confirmation link in our e-mail, or the “Subscribe” button in the app after signing in) | consent, Art. 6(1)(a); you can withdraw it at any time via the unsubscribe link in every newsletter or at support@getproofanchor.com, without affecting earlier processing. Creating an account does not subscribe you. | until you unsubscribe; unconfirmed sign-ups 30 days; after unsubscribing only a record of the consent and its withdrawal, as long as we need to demonstrate it |
3.2 Providing data for the contract is necessary; without an e-mail address we cannot create an Account or deliver Assisted Capture. Data for analytics is processed only if you consent.
3.3 Browser extension. The extension acts only when you start a capture. It then records the page in the open tab as you see it (including content visible only to you because you are signed in), the network log of that tab (with cookies, authorisation headers and session tokens redacted) and technical metadata, and sends them to us to create the proof. It does not monitor your browsing in the background, does not record keystrokes and does not send data for advertising. Settings and the sign-in token are stored in the extension's local storage.
4. Content you capture and people who appear in it
4.1 When you create a proof, we process the content of the page or file you choose: screenshots, page source (HTML/MHTML), network log (HAR) with cookies and authorisation headers redacted, optional video, TLS certificates, DNS records (queried via public resolvers) and RDAP/WHOIS data of the domain. This content may contain personal data of third parties (for example names, photos or posts).
4.2 For this content the customer is the controller: they decide what is captured and why (for example to establish or defend legal claims) and they are responsible for having a legal basis. We process the content only on the customer's instructions, to provide the Service, under the Data Processing Agreement (getproofanchor.com/dpa). For Assisted Capture, our operator captures the URLs on the customer's instructions in the same role.
4.3 Server captures. When we capture a URL on our servers, our browser visits the target website like a normal visitor; the website sees the IP address of our server, not yours. Cookie banners on the captured site are handled by rules. If the rules fail, an AI fallback may send a screenshot of the visible part of the page to Anthropic, PBC (USA) to identify the consent button. The fallback is enabled by default. You can switch it off for an individual capture in the dashboard ("Capture without AI"), for an API request (parameter ai_consent: false) and for a scheduled monitor (option "Capture without AI" when the monitor is created). Whether it was used is recorded in the proof's PDF report. The screenshot may contain personal data shown on the page.
4.4 Publication. A proof becomes visible to others only if it is published and the link is shared. You publish your own proofs; for Assisted Capture orders we publish the proofs on the customer's instruction given in the order, unless private delivery is requested. Public proof pages are marked so that search engines do not index them, unless the proof is additionally listed.
4.5 If you appear in captured content. We do not know the people who appear in content captured by our customers and usually cannot identify them. If you believe that a proof contains your personal data, write to hello@getproofanchor.com with the proof ID or link. We will forward your request to the customer as controller and assist them with it; where we are entitled to do so, for example in the case of an obviously unlawful publication, we will revoke the public proof page. The captured files of a proof can be deleted on the customer's instruction; only the hashes and the revocation record remain (section 8). Whether erasure is required is assessed by the customer as controller, e.g. in light of Art. 17(3)(e) GDPR.
5. Recipients and sub-processors
5.1 We do not sell personal data and do not share it for advertising. We use these processors, bound by contracts under Article 28 GDPR:
- Váš Hosting s.r.o., Nymburk, Czech Republic: VPS hosting of our servers, databases and e-mail server, and nightly backups to separate external servers (Czech Republic, EU). E-mails are sent from our own mail server on this infrastructure.
- Stripe Payments Europe, Ltd. (Ireland): payments, invoices, tax calculation (Stripe Tax) and the customer portal. Stripe also processes some data as an independent controller, for example to prevent fraud and meet its regulatory obligations.
- SK ID Solutions AS (Estonia): qualified electronic timestamps. It receives only the hash of a proof, no personal data.
- Anthropic, PBC (USA): the AI fallback for cookie banners in server captures (section 4.3), and AI tools we use to handle e-mail correspondence and business contacts.
- Google Ireland Limited (Ireland): Google Analytics 4, only after your consent.
5.2 Other recipients that are not our processors: the public OpenTimestamps calendar servers (they receive only hashes), the public DNS resolvers of Cloudflare, Google and Quad9 and the RDAP servers of domain registries (they are queried with the domain of the captured page, not with your data), and the websites you ask us to capture. If you choose to contact us via WhatsApp, WhatsApp Ireland Limited processes the communication as an independent controller. On pages with videos nothing is loaded from YouTube until you click play; the player (youtube-nocookie.com) is then provided by Google as an independent controller. We share data with public authorities only when the law requires it, and with our legal and tax advisers, who are bound by confidentiality.
5.3 The current list with details and safeguards is at getproofanchor.com/subprocessors.
6. Transfers outside the EU
6.1 Our servers and databases are located in the Czech Republic. Data is transferred outside the European Economic Area only in these cases:
- Anthropic, PBC (USA), for the cookie-banner fallback and our AI tools: on the basis of the standard contractual clauses (Commission Implementing Decision (EU) 2021/914, Modules 2 and 3) incorporated in Anthropic's Data Processing Addendum, which forms part of Anthropic's Commercial Terms of Service for API customers;
- Stripe may transfer data to Stripe, Inc. (USA) within its group, on the basis of the Commission adequacy decision (EU) 2023/1795 (EU–US Data Privacy Framework), with standard contractual clauses as a fallback;
- Google (Google Analytics and, after you click play, YouTube) may transfer data to Google LLC (USA), on the basis of the Commission adequacy decision (EU) 2023/1795 (EU–US Data Privacy Framework), with standard contractual clauses as a fallback.
6.2 You can request a copy of the relevant safeguards at hello@getproofanchor.com.
7. How long we keep data
7.1 We keep personal data only for as long as necessary for the purpose. The periods in section 3 apply; in particular:
- Account data and proofs: as long as the Account exists. We do not delete proofs automatically; revoking a proof does not delete it. Proof logs (creation, access, verification, revocation) are kept for as long as the proof exists, as part of its chain of custody.
- Sign-in links are valid for 30 minutes and can be used only once; they are stored only as hashes. Sign-in sessions (refresh tokens) are valid for 7 days.
- Tax documents: 10 years from the end of the tax year in which they were issued (section 35 of the Czech VAT Act No. 235/2004 Coll.).
- Assisted Capture: order data for as long as the delivered proofs exist, and at least 10 years (tax documents). Delivered proofs remain available via their links, but this is not an archiving guarantee; please keep your own copies.
- Operational logs: web server logs 30 days, application logs 90 days. After the periods expire, the data is deleted or anonymised; backups are overwritten in the regular backup cycle.
- Newsletter: until you unsubscribe. Sign-ups not confirmed via the e-mail link are deleted after 30 days. After you unsubscribe we keep only a record of the subscription and its withdrawal for as long as we need to demonstrate that we had your consent.
8. Account deletion and the immutability of proofs
8.1 You can delete your Account at any time in the dashboard (Account → Delete account). Before doing so, you can download your evidence packages and export your data.
8.2 On deletion, we: cancel any active subscription in Stripe; replace your e-mail address with an anonymous identifier and deactivate the Account; revoke API keys and sign-in sessions; remove titles, URLs and capture metadata of the proofs in your personal workspace and delete their captured files (screenshots, page sources, network logs, videos and other artefacts); and unpublish those proofs.
8.3 We keep the hashes, timestamps (tokens contain only hashes) and proof-log entries without any link to your Account and without the captured content. These are pseudonymised data: on their own they do not identify you, but they can be matched to a specific file by someone who holds it. We keep them on the basis of our legitimate interest, and that of persons who have already received evidence packages, in keeping the evidence chain verifiable and intact (Art. 6(1)(f) GDPR). You may object under Art. 21 GDPR. Proofs in a team workspace belong to the workspace and are not affected.
8.4 Payment and tax records are kept for the statutory period even after the Account is deleted (section 7).
9. Your rights
9.1 Under the GDPR you have the right to:
- access your data and receive a copy (Art. 15);
- rectification of inaccurate data (Art. 16);
- erasure (Art. 17), with the limits described in section 8 (hashes and proof-log entries are kept without any link to you);
- restriction of processing (Art. 18);
- data portability (Art. 20): you can export your data in a machine-readable format (JSON) in the dashboard and download your evidence packages at any time;
- object to processing based on legitimate interest (Art. 21), including at any time to direct marketing;
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal: for analytics via "Cookie settings" in the footer of every page.
9.2 To exercise your rights, write to hello@getproofanchor.com. We may ask you to confirm your identity (for example from the e-mail address of the Account). We will respond within one month; in complex cases this can be extended by two further months, and we will tell you why.
9.3 Requests concerning content captured by a customer are handled as described in section 4.5.
10. Right to lodge a complaint
10.1 If you believe we are processing your data unlawfully, you can lodge a complaint with the supervisory authority: the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, www.uoou.gov.cz. You can also complain to the supervisory authority in the EU country where you live or work. We would appreciate it if you contacted us first.
12. Security
12.1 We protect data with technical and organisational measures appropriate to the risk, in particular: encrypted connections (TLS) for the website, the application and our interfaces; passwords stored only as bcrypt hashes; sign-in links and API keys stored only as hashes; Forensic Browser licence keys stored as hashes and encrypted; captures carried out in an isolated browser whose network traffic passes through a filtering proxy that blocks access to internal networks; redaction of cookies, authorisation headers and session tokens in captures; services running under separate unprivileged system accounts; database rules that prevent the modification or deletion of evidence data and log entries; a hash-chained proof log; logging and rate limiting; and nightly backups by our hosting provider to separate external servers.
12.2 If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the Office for Personal Data Protection within 72 hours and inform you if the risk is high.
13. Automated decision-making
13.1 We do not make decisions based solely on automated processing, including profiling, that would have legal or similarly significant effects on you. Automatic checks (for example rate limits or blocking of technically dangerous URLs) only protect the Service.
14. Children
14.1 The Service is not intended for persons under 18 years of age, and we do not knowingly collect their data.
15. Changes to this policy
15.1 We will update this policy when our processing changes. We will inform you of material changes by e-mail or in the application in advance. The version and date are given at the top of this page.