Legal
Privacy policy
Effective October 15, 2026
In short: CaptureSeal collects nothing by default. There are no analytics or advertising SDKs, no tracking and no account. Your photos and videos stay on your phone unless you share them. If you publish a verify link, only the signed record is stored, and you can withdraw it at any time. If you join the waitlist, we keep your email only to tell you about the launch and major updates, and delete it whenever you ask.
Who we are
CaptureSeal is made by techynAR (“we”). Contact: support@techynar.com.
The launch waitlist
CaptureSeal is coming soon to iPhone and Android. If you join the waitlist on this site, we store:
- your email address;
- which phone you said you’ll use (iPhone, Android or both), if you chose one;
- which form on the site you used, and when you signed up.
We use it only to email you when CaptureSeal launches and about major updates to it. We don’t sell or share it, don’t add it to other lists, and don’t use tracking pixels in those emails. It’s stored in our database on Cloudflare.
Deleting it: email support@techynar.com from the address you signed up with, or use the unsubscribe link in any email we send, and we’ll delete your address. Like every other request on this site, the sign-up is rate-limited by IP address, which our server processes briefly and doesn’t store.
The app
- Photos, videos and records are created and stored on your phone. We don’t receive them.
- Location is used on the device to stamp captures and is only recorded in a capture when you allow location access. Addresses are looked up with your phone’s built-in geocoding service (Apple’s on iPhone, the system geocoder on Android).
- Network-time check: to cross-check the clock, the app makes a request to a well-known HTTPS server and reads the time in its response. That server receives a normal web request from your device; no CaptureSeal data is sent.
- Signing key: created in your phone’s secure hardware (the Secure Enclave on iPhone; StrongBox or the TEE on Android) and never leaves it. Its public key is included in each capture’s record.
- No analytics, no advertising, no tracking. The app contains no third-party analytics, advertising or crash-reporting SDKs.
- Purchases are processed by Apple or Google. We receive no payment details and don’t learn your Apple Account or Google account.
Verify links (only when you publish one)
When you publish a verify link, the app uploads that capture’s signed record to our server on Cloudflare. The record contains:
- the capture time, time zone and how the time was checked;
- the location (coordinates and accuracy) and address, if the capture has them;
- the device model and OS version, and the camera and resolution;
- the SHA-256 fingerprints, file names and sizes of the original and stamped files;
- the public key and key ID that signed it.
The photo or video itself is never uploaded. Anyone with the link or the QR code can see the record, including its location, so share links with that in mind. Verify pages are marked so search engines don’t index them.
Withdrawing a link: you can withdraw a published record from the app at any time. We delete the record and signature and keep only the capture ID and key ID, so the same ID can’t be published again by someone else.
To protect the service from abuse, our server briefly processes the IP address of each request to apply rate limits. Cloudflare, our hosting provider, processes request data as described in its privacy policy.
Proof Files (.seal)
A Proof File is made on your phone and goes only where you send it. It contains the stamped photo or video and its signed record, including the location, so share it with the same care as the photo.
This website
- No cookies, analytics or tracking scripts. Your theme and animation choices are remembered in your own browser’s storage, never sent to us.
- Files you check on the verifier or a verify page are fingerprinted in your browser and never uploaded.
- Verify pages show the capture location on a map whose tiles load from OpenStreetMap (tile.openstreetmap.org), which receives your IP address and the map area requested. See the OSM Foundation privacy policy.
- The verifier and verify pages load open-source code from cdnjs (Cloudflare) and jsDelivr, pinned with integrity checks.
Your rights
Because we hold no account data, most requests are answered by the app itself: delete captures on your phone, and withdraw any verify link. For anything else, including access or deletion requests under GDPR or CCPA and removal from the waitlist, email support@techynar.com.
Children
CaptureSeal isn’t directed at children under 13 and doesn’t knowingly collect their data.
Changes
If this policy changes, we’ll update this page and its effective date. Material changes will also be noted in the app, and emailed to the waitlist before launch.
Last updated