Privacy
Last updated: July 27, 2026
This policy covers ratifyprotocol.com. It is written to describe what this site actually does, which is deliberately very little.
Who we are
Identities.AI, Inc. publishes the Ratify Protocol and operates this website. The protocol specification and reference implementations are public at github.com/identities-ai/ratify-protocol.
What we collect
Design-partner submissions. If you submit the design-partner form, we receive the name, work email, organization, role, whether you receive or operate agents, the protocol surface, your timeline, and the description you write. We use it to reply and to decide whether a technical conversation makes sense.
Standard request logs. Cloudflare, which serves this site, records ordinary HTTP request metadata such as IP address, user-agent, and timestamp for security and abuse prevention. Form submissions also appear in our short-lived application logs.
What we do not collect
This site runs no analytics: no tracking scripts, no advertising cookies, no session recording, no third-party tags.
The Break the Proof challenge runs entirely in your browser. The proofs you tamper with, the attacks you try, and the results you see are never transmitted to us or to anyone else.
We do not sell, rent, or share your information with advertisers or data brokers, and we do not train AI models on design-partner submissions.
Where submissions go
A design-partner submission is stored in Cloudflare KV, encrypted at rest and in transit, and is also delivered to us as an email through Resend, our email provider. We store it first so that a submission is not lost if email delivery fails.
Access is limited to Identities.AI, Inc. personnel with a business need. We do not load submissions into advertising, enrichment, or third-party sales tools.
How long we keep it
We keep design-partner submissions and correspondence for as long as the conversation is useful, and delete them on request. Email hello@ratifyprotocol.com to have your submission deleted at any time.
Your rights
If you are a California, EEA, UK, or Canadian resident, you have the right to access, correct, delete, or port your personal information, and to opt out of any sale or sharing of it. We do not sell or share personal information. To exercise any of these rights, email hello@ratifyprotocol.com.
Security
Traffic to this site is encrypted in transit. Access to design-partner correspondence is limited to Identities.AI, Inc. personnel with a business need.
Security reports about this site or any Ratify reference implementation should go to security@identities.ai.
Changes
We will update this policy as the product evolves. The date above always reflects the current version.