ProofFetch receives the submitted public URL and ordinary request metadata needed to operate and secure the service. To count visits, we record which step of the page a visit reached, the site that referred it and the time. We do not store the URLs you check, page content, IP addresses or credentials, and no analytics cookie is set. Do not submit personal secrets, credentials, cookies, or private URLs. The API is not designed to accept them. Card checkout sets one short-lived, HttpOnly order cookie so the key can be shown only in the browser that paid; Stripe processes the card and ProofFetch never sees card details. Keys are stored only as SHA-256 hashes. Free keys: to allow one free key per network per month, we store a one-way SHA-256 hash of your network address (your IPv4 address, or the first half of an IPv6 address) combined with the month and a server secret, together with the day the key was issued. The raw IP address is not stored, and without that secret the hash cannot be matched back to an address. The free key itself is stored only as a SHA-256 hash.
Operated by Neverclosed (tryneverclosed.com). Card payments are processed by Stripe and appear as Living Stack, the merchant account Neverclosed operates. Questions: bryan@tryneverclosed.com. We reply within one business day.
Effective 2026-09-05; updated 2026-10-14.