Skip to content
ECZ-IDAPI
Verify an ECZ-ID

Privacy

What this site collects

This is a set of pages. It holds no account, no form, no intake and no identity truth — and the origin is configured so that it could not send anything to a third party even if some future change tried to.

Structural, not procedural

What this property cannot collect

These are not undertakings. They are consequences of how the site is built and how the origin answers.

  • Nothing you type

    There is no form, no search field and no intake anywhere on this property. There is nothing typed for anything to collect.

  • No third-party collector

    The Content-Security-Policy sets connect-src 'self'. The browser could not reach an analytics host on another origin even if one were added by mistake.

  • No cross-site identifier

    No cookie is set, no visitor or device identifier is generated, and no third-party script is loaded on any page.

  • No identity records

    This site stores no ECZ-ID, no Passport and no evidence. Records live on the Resolver, and reading one never goes through here.

What is recorded

Page views and allowlisted campaign parameters

If an analytics endpoint is configured for this deployment, the events below are the complete list. If none is configured, nothing leaves the browser at all.

A page-view event carrying the path, and the four utm_* parameters if they are present in the URL, each bounded in length. The referring host only — never a full referring URL, which can carry a private path.

A click on a handoff control records which control it was and which surface it was on. No price, no basket and nothing about you.

Ordinary web-server request logs exist, as they do for any origin. They are operational, kept for the shortest period that is useful, and never joined to anything above.

Elsewhere

Where your data actually lives

This site is the least interesting place in the estate from a privacy point of view, because it holds nothing.

Acquisition, payment and entitlement belong to TrustOps. Public identity state belongs to the Resolver, which serves read-only records with no account and no key. Neither is operated from this host, and a link from here to either is an ordinary top-level navigation.

Questions, corrections and requests: hello@ecocitizenz.com.