Security and data

What ProofFetch keeps, where, and how to remove it.

What we keep

When you use	We keep	For how long
The free check on the homepage	Nothing about the page. The URL and text go back to your browser and are not saved.	–
A full extraction (key or per-call payment)	The response it returned (the URL, the extracted text and its fingerprints) with its receipt, so the same request can be recovered if the connection drops.	7 days, then deleted automatically
API keys	Only a SHA-256 hash of the key and its first few characters, plus credits used. We cannot show a key again.	While the key has credits
Free keys, one per network a month	A one-way hash of your network address mixed with the month and a server secret, and the day it was issued. Never the raw IP address.	Kept with the key
Visit counts	Which step of the page a visit reached, the referring site from a fixed list and the time. No IP address, no cookie.	Kept as counts
Card payments	Stripe handles the card. We keep the Stripe order reference, the amount and the credits. ProofFetch never sees card numbers.	For the books
Support cases	The message you write and any hashes or receipt reference you add.	Until the case is closed and you ask us to delete it

Where it runs

ProofFetch runs on Cloudflare Workers, and what it keeps sits in a Cloudflare D1 database. Card payments go through Stripe.

What it will fetch

Public http and https pages only. Private networks, internal addresses, unusual ports and URLs with passwords are refused before any request.
Every redirect is checked against the same rules.
It sends no cookies and never signs in to a site.
Page size and fetch time are capped.

The hidden-instruction check

Every fetch scans the extracted text for instructions aimed at AI models and returns each match with its excerpt. A flag is a warning for you to review. It doesn't change the text.

Check a seal yourself

Each response carries the SHA-256 of the raw bytes and of the extracted text. Run sha256sum on the same bytes and the hashes match. The homepage lets you download real captured bytes and try it. To check a whole response, use the open-source verifier (MIT licensed, no dependencies): it recomputes both fingerprints from the page bytes and confirms every numbered paragraph came from that page.

Delete your data

Email bryan@steellantern.com with the request hash or receipt reference from your response to delete a stored response before its 7 days are up. Free keys hold 25 extractions and need no account, so there is no profile to delete.

Full policies: Privacy · Terms · Refunds. Live service state: Status.

Questions: bryan@steellantern.com. Bryan answers, within one business day. Operated by Steel Lantern (steellantern.com).