At its core, tsrct is a repository of public keys, which are, by definition designed to be shared.

tsrct’s entire focus is privacy. Therefore:

• tsrct doesn’t sell your data
• tsrct doesn’t show ads
• tsrct doesn’t use any cookies (e.g. no ‘tracking cookies’, or ‘functional cookies’, or ‘performance cookies’, etc.)
• tsrct uses Google Analytics to get aggregate information about number of users and the features they’re using. None of this information is correlated to you personally.

When you create a personal account on tsrct, the following information is collected:

1. Nothing. Creating a personal account on tsrct doesn’t require you to share any personal information.
   1. You only indicate the tsrct id of your choice
   2. The public key corresponding to your private key is generated and stored on the tsrct system

For personal accounts:

• Self Attestation allows you to create a publicly viewable profile containing only the information you wish to disclose
• The above information is never shared for any purpose (such as selling ads); we don’t have ads; never will

For corporate accounts:

1. Only domain verification is required. Other properties can be added later.

Some data you create on tsrct is public:

1. Posts: these are public pieces of information that a user or other entity might publish for public consumption
2. Public Keys: tsrct creates a key-pair for each account; the public key portion of this is designed to be shared and made available via a public api

NOTE: since keys are used for validation of published information, and documents can be referred to by other documents as part of their validation, keys and posts once created cannot be deleted.

Some data you create on tsrct is private:

1. messages: these are messages for transacting permissions, authorizations, etc. and are only accessible by entities granted explicit permission
2. tags: these are properties of your account that you want to control access to, and selectively approve access via a defined process of grants

When you use the tsrct api or websites, the following information is collected (as part of usage analytics):

1. approximate location based on your IP address; this information is use for analytics to understand traffic flows and where we might need to run servers; this information is not correlated to you personally
2. your IP address is stored as a one-way obfuscated hash purely as a proxy to establish an approximate and imperfect count of unique visitors. Since tsrct doesn’t use cookies, we have no means of knowing how many users are actually visiting the site. The original unhashed IP address is never stored. This information is not correlated to you personally.
3. your device’s “user agent” so tsrct can understand the type of devices end users are using and can build the product to optimize the information accordingly. This information is not correlated to you personally.

To re-iterate, the above information is collected with no recognition as to who the actual user of the tsrct system is, and there is no way to tsrct to identify an individual user from the collected analytics.

NOTE: use of tsrct for illegal activity is prohibited. tsrct reserves the right to take appropriate action if illegal use is suspected or reported.

---