Files are uploaded solely for the purpose of generating a verification proof.

No personal data is collected beyond what is technically required for upload and generation of the SHA-256 hash.

Nothing besides the SHA-256 hash and the optional custom hashtag will be stored.

For subscription payments, an email address is required by Stripe to manage billing, cancellations, and receipts. This information is handled exclusively by Stripe and is not stored or used by hashtagfile.com.

Files are never stored or retained to generate the unique hash tag. Temporary storage is used only when you choose to share the certificate or the original file with someone else (24 hours maximum).

When using the share feature (email or messenger), the certificate and the optional original file are temporarily stored for delivery (maximum 24 hours) and deleted automatically afterwards. No permanent storage or access to the files occurs at any time. All temporary processing is performed on servers located in data centers within the European Union.

Storage of the resulting hash is necessary to fulfil the purpose of this web service — proving that files have not been changed.

Processing is based on Art. 6 (1) (f) GDPR (legitimate interest in providing a reliable integrity verification service).

For any inquiries, contact info@jpl-consulting.de.