Privacy Policy

This Privacy Policy explains how Verify Open Badge (the “Service”, “we”, “us”, or “our”) handles information when you visit or use the Service. The Service is a public tool for checking Open Badge and verifiable credential files or URLs. It does not provide user accounts, subscriptions, or payment services.

Information we process

To perform a validation, we process the file or URL you submit and the information contained in the credential, which may include personal data such as a name, email address, evidence, issuer information, or identifiers. We also process the validation result so that it can be returned to your browser.

Our hosting and security infrastructure may process standard technical information, such as IP address, browser or device details, request time, and error information. The Service sets no cookies, runs no advertising network, and loads no third-party analytics or fingerprinting script.

How we use information

• To receive, analyse, and return the result of a validation request.
• To operate, secure, troubleshoot, and protect the Service from misuse.
• To comply with a legal obligation or respond to a valid legal request when required.

We do not use submitted credentials for advertising, sell them, or use them to build marketing profiles.

Retention

We do not intentionally keep submitted files, submitted URLs, or validation results in an application database or user account. They are processed to complete your request. Operational and security logs may be retained by the Service or its hosting providers for a limited period when reasonably necessary for security, troubleshooting, abuse prevention, or legal compliance.

Sharing and external requests

The Service is hosted using third-party infrastructure, which processes information on our behalf to deliver and secure the Service. During a validation, the Service may also request the URL you submit or URLs referenced by a credential, such as contexts, proof documents, status lists, or other linked resources. Those third parties receive the request information needed to respond and apply their own privacy practices. Do not submit a URL or credential unless you are authorised to do so.

Cookies and analytics

The Service does not set cookies and does not load advertising or analytics scripts. There is no consent banner because there is nothing to consent to.

Your choices and rights

Depending on where you live and the circumstances, you may have rights to request access to, correction, deletion, restriction, portability, or objection to the processing of your personal data. You may also have the right to complain to the data protection authority in your place of residence or work. Because the Service does not maintain user accounts or an application database of submitted credentials, some requests may be limited in practice.

To make a privacy request or ask a question about this Policy, use the contact form. Messages sent through that form are delivered to the team that maintains the Service and are not added to a mailing list.

Security

We use reasonable technical and organisational measures appropriate to the Service. No internet transmission or system is completely secure, so please avoid submitting credentials that contain sensitive information unless you understand and accept the associated risk.

Children

The Service is not directed to children, and we do not knowingly seek to collect personal information from children. If you believe a child has submitted personal information through the Service, contact the Service operator so the request can be reviewed.

Changes to this Policy

We may update this Policy when the Service or applicable requirements change. The “Last updated” date shows when it was most recently revised. Your continued use of the Service after an update is subject to the revised Policy.