photos

uploaded proof photos are publicly visible on your claim's verification page. client-side processing strips embedded EXIF (GPS, device info) from public files; extracted metadata lives only in our database for fraud checks.

scans

when someone scans a sign QR we log a salted hash of the IP and coarse city-level location — never raw IP addresses. scan logs older than 12 months are aggregated.

wallets

wallet addresses are public-chain data; we display them truncated and never sell any data, ever.

deletion

deletion requests: support@plague.xyz. photos of paid claims may be retained through the dispute window for audit, then deleted on request. photos auto-delete 12 months after a claim reaches a terminal state.