Privacy Policy
Effective Date: March 13, 2026
This Privacy Policy explains how StampMyWork ("Service"), operated by The Modelo Tech Solutions LLC ("Company", "we", "us"), collects, uses, and protects your information.
1. Information We Collect
| Data Type | What We Collect | Why |
|---|---|---|
| Account Info | Email, display name, hashed password | Authentication and account management |
| Uploaded Files | Your creative works (images, audio, video, documents, code, designs) | Hash computation, certificate generation, verification |
| Registration Data | File title, description, tags, creator name, SHA-256 hash, perceptual hash, timestamp | Certificate content and verification records |
| Usage Data | IP address, browser type, pages visited | Security, rate limiting, abuse prevention |
2. How We Use Your Information
- Service delivery: Computing cryptographic hashes, generating certificates, enabling verification.
- Email delivery: Sending certificates, account notifications, and service updates to the email you provide.
- Security: Rate limiting, fraud detection, protecting against abuse.
- Support: Responding to your inquiries or issues.
3. What We Do NOT Do
- We do not sell, rent, or share your personal information with third parties for marketing purposes.
- We do not use your uploaded files for any purpose other than providing the Service.
- We do not display advertising on the Service.
- We do not train AI models on your uploaded content.
- We do not track you across other websites.
4. File Storage & Security
- Uploaded files are stored on our servers and are not publicly accessible.
- Only the cryptographic hash and metadata are shared on verification pages — not the file itself.
- Passwords are stored using bcrypt one-way hashing and are never stored in plain text.
- Session tokens are signed and httponly to prevent XSS attacks.
- All connections are encrypted via HTTPS.
5. Data Retention
- Your account data and registrations are retained as long as your account is active.
- You can delete individual registrations at any time via the dashboard.
- If you delete your account, all associated data (files, certificates, registrations) will be permanently deleted within 30 days.
6. Cookies
We use a single session cookie (stamp_session) to keep you logged in. This cookie is:
- HttpOnly — not accessible to JavaScript
- SameSite: Lax — not sent on cross-site requests
- Secure — only sent over HTTPS in production
- Valid for 30 days
We do not use tracking cookies, analytics cookies, or third-party cookies.
7. Third-Party Services
We use the following third-party services:
- Cloudflare — DNS, CDN, and DDoS protection. Cloudflare may process your IP address. See Cloudflare Privacy Policy.
- Google Fonts — Font delivery. See Google Privacy Policy.
8. Your Rights
You have the right to:
- Access your personal data — view your account and registration information via the dashboard.
- Delete your data — remove registrations or your entire account.
- Export your data — download your certificates and registration records.
- Correct your data — update your account information.
9. Children's Privacy
StampMyWork is not directed at children under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy. Material changes will be communicated via email or a notice on the Service. The "Effective Date" at the top will be updated.
11. Contact
Privacy questions? Contact us at [email protected].