Privacy

When you verify with Google

• You sign in on Google's own page. Your password goes only to Google.
• Google gives the ProveIt Lit Action (a published program running inside Lit Protocol's sealed enclave) a one-time sign-in. The action reads only your account's company domain (Google's “hd” field), whether your email is verified, and a check number that ties the sign-in to this one ProveIt link.
• It shares only the result: the company domain (or that there was none), the time, whether the domain was registered in the last 90 days, and a short reason if the check didn't pass. Your name, email address and Google user ID are never shared or stored.

When you verify with Discord

• You sign in on Discord's own page. Your password goes only to Discord.
• Discord asks to let ProveIt know who you are and read your member info in your servers (Discord has no one-server option). The Lit Action looks only at the one server you were asked about. It never requests your list of servers.
• It shares only the result: your Discord username and user ID (so the person who asked can match it to the account messaging them), whether you hold the role they asked about in that server, and a short reason if the check didn't pass. Your email, nickname and other servers are never shared or stored.

What ProveIt stores, and for how long

• The signed result described above, in an Upstash Redis database in Frankfurt, Germany. It is deleted automatically after 30 days.
• Anyone who has the ProveIt link for that check (the person who asked, and you) can see its result during those 30 days.
• To limit how many checks run, a counter keyed by a salted hash of your IP address (never the address itself). It is deleted automatically after 10 minutes.
• While you are away on Google's or Discord's page, your browser tab keeps a temporary note of the check, which is removed when you come back or close the tab.
• The one-time sign-in and any Google or Discord tokens are used once inside the Lit enclave and are never stored or returned.

Who handles what

• Google or Discord: your sign-in.
• Lit Protocol: runs the check inside its enclave. ProveIt asks Lit not to keep the request in its server logs.
• Vercel: hosts this website and may keep standard request logs under its own policy.
• Upstash: stores the signed results and rate-limit counters described above.

ProveIt does not sell, rent or share data with anyone else.

An honest limit

Your one-time sign-in passes through ProveIt’s server on its way to the Lit Action. The published code only forwards it and never keeps it. Nobody, including whoever runs ProveIt, can fake a result: only the published Lit Action can sign one. But you are trusting that this website runs the published code. Its exact fingerprints are listed on the Verify page.

Google user data

ProveIt’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. It is used only to produce the result above, and is never transferred, sold or used for anything else.

Questions or deletion

Results delete themselves after 30 days. To ask for one to be deleted sooner, or for any question, email salamiademola73@gmail.com.