The short version: your files never reach us. Fingerprints are computed in your browser and the file itself is never uploaded. Beyond that we run website analytics you can decline, a newsletter you opt into, and a registry that stores records about works rather than the works themselves.
Who we are
Alltio, Inc., a Delaware corporation, is the controller of the personal data described here. Write to contact@alltio.com about anything on this page.
What we collect, and why
| What | Why | Basis |
|---|---|---|
| Analytics. Google Analytics 4, recording pages viewed and broad location. | To see which pages are read. | Your consent. Denied by default until you accept — see below. |
| Cookie choice. A record of what you accepted or declined. | So we do not ask again, and can show we honoured it. | Legal obligation. |
| Newsletter. Your email address, via HubSpot. | To send The Clearing Layer. | Your consent. Unsubscribe in any issue. |
| Registration. The fingerprint of your work, the terms you state, a display name, a contact email and, where you give it, a legal identity. | To create and resolve the record. | Performance of a contract with you. |
| Lookup requests. Aggregate counts. Per-request data is kept briefly for rate limiting. | To keep the API available. | Our legitimate interest in running the service. |
| Server logs. IP address, user agent and requested URL, held by our host. | Security and abuse. | Our legitimate interest in a service that stays up. |
Analytics are off until you say otherwise
We use Google Consent Mode v2 with every category set to denied before you choose. Until you accept in the banner, analytics and advertising storage are withheld. You can change your mind at any time through Cookie Settings in the footer of any page.
What we never receive
When you register a work, the SHA-256 fingerprint is computed inside your browser using the Web Crypto API. The file is not uploaded. You can confirm this yourself: open your browser’s network tab before you register and watch. We hold records about works. We do not hold the works.
The same holds for the Copyright Office preparation we are building: we assemble the application content, and the deposit copy you send to the Office never enters our system.
Lookup traffic is commercially sensitive, and we treat it that way
Which fingerprints an ingest pipeline checks is a map of what that organisation is ingesting. Our policy is aggregate-only logging, with per-request data retained no longer than 30 days and used solely for rate limiting and abuse response. It is never sold, and never used to reconstruct a caller’s corpus interest.
Who else processes it
Google hosts the site and provides Analytics. HubSpot provides the newsletter, forms and cookie banner. Both act on our instructions. We do not sell personal data, and we do not share it for advertising.
Both are United States companies, so data reaches the US. Where transfers are made from the European Economic Area or the United Kingdom, they rely on the safeguards those providers publish, including the EU-US Data Privacy Framework and standard contractual clauses.
How long we keep it
Newsletter data until you unsubscribe. Analytics on Google’s default retention. Per-request lookup data no longer than 30 days.
Registry records are different, and deliberately so. A record is an append-only assertion that something was claimed at a moment in time, and a registry whose history can be quietly rewritten is worth nothing. Revisions supersede rather than overwrite, and superseded versions stay resolvable. If you need a record corrected, we annotate it and publish the correction.
Registering without publishing your name
You can register pseudonymously. Where you give us a legal identity, we hold it and do not publish it — public surfaces show only a display name and a verification tier. Accountability attaches at settlement, not at display.
Your rights
Depending on where you live you may have the right to see the personal data we hold, correct it, delete it, take it elsewhere, object to processing based on legitimate interests, and withdraw consent at any time without affecting what came before. Write to contact@alltio.com and we will respond within one month.
If you are in the EEA or the UK and think we have got it wrong, you can complain to your national data protection authority. We would rather you told us first.
Children
This service is not directed at children under 16, and we do not knowingly collect their personal data.
Changes
We will update this page as the service changes, and the date at the top will move with it. Where a change materially affects how we handle personal data, we will say so rather than relying on you re-reading the page.