Privacy Policy

Last updated July 7, 2026 · Version 1.1

FreeholdIP is operated by RaptorLockIP™. This Privacy Policy explains what information the FreeholdIP service handles and how. FreeholdIP is built around data minimization: we are non-custodial and we deliberately avoid collecting personal information we do not need.

1. Information we do not collect or hold

We never receive or store your password, your private keys, your 12-word recovery phrase, or your seed. These are generated and held only on your own device. We cannot access your identity or recover it for you. We do not perform identity (KYC) verification on people who create an identity.

2. Information you publish (public by design)

When you create an identity, your identity name and public blockchain address are written to the Algorand blockchain, and the profile you choose to publish (which may include a display name, role, website, contact details you enter, photo, logo, and the credentials you choose to show) is stored on IPFS. This information is public and permanent by design. You choose what to include, and you can hide profile entries, but data already written to the blockchain or to IPFS cannot be deleted by us.

3. Payment information

Payments are processed by Stripe. Stripe collects and processes your payment details and may collect your email and billing information under Stripe's Privacy Policy. We do not receive or store your full card number. We receive limited confirmation information (such as that a payment succeeded and the related session) so we can create your identity and handle support or refunds.

4. Issuer applications

Organizations that apply to become verified issuers submit business and contact information and supporting documents. These are never written to our servers' storage. The application is delivered directly to our operations team by email (sent through Proton Mail) and reviewed there. After approval we retain only the issuer's public on-chain identity and directory listing — no application documents or private information. Our servers enforce this as a standing rule: personal information is not kept at rest.

5. Third-party services

• Stripe — payment processing.
• Algorand blockchain — a public ledger that records identities and asset ownership.
• IPFS — content-addressed storage that hosts published profiles and credential payloads.
• Bitcoin (via OpenTimestamps) — used to timestamp/anchor credential records.
• Cloudflare DNS-over-HTTPS — used to check issuers' published domain records during verification.
• Proton Mail — carries issuer-application email to our operations team (Section 4).

These are independent networks and services with their own terms and privacy practices. We do not sell your personal information. Our web pages load no third-party scripts, no analytics, and no external fonts — nothing on our pages reports your visit to anyone else.

6. Cookies and local storage

FreeholdIP does not use advertising or cross-site tracking cookies. Ordinary visitors receive no cookies at all. The one cookie we set (fhip_issuer_session) exists only to keep verified issuers and our own operators signed in to their console; it expires after 12 hours and identifies a session, not a person's browsing. Your browser's local storage is used to keep your encrypted keystore and a small amount of state on your own device; this stays in your browser and is not transmitted to us.

7. Server logs and IP addresses

We never store complete IP addresses. Our web servers anonymize every visitor's IP address before it is written to any log (the last portion is discarded), and those logs are deleted on a rolling 14-day cycle. Full IP addresses are used only momentarily, in memory, for rate limiting and abuse protection, and are never saved.

8. The FreeholdIP Browser

The FreeholdIP Browser contains no analytics, no telemetry, and no crash reporting, sets no cookies of its own, and does not keep a browsing history. So the service can work, the browser does contact networks on your behalf: it resolves the names you visit through our resolver or the relevant public blockchain's servers (which see the lookup and your network address), fetches published content from IPFS, and — if you use messaging — checks our relay for new messages while an identity is unlocked. Message content is end-to-end encrypted; our relay sees only sealed envelopes and the public names involved, and holds undelivered envelopes for at most 30 days. If you add names to your dashboard, the browser periodically re-checks their on-chain ownership through our resolver so it can warn you of a hostile change; this check can be turned off in the menu. The default new-tab page is DuckDuckGo, and you can change your search engine in the menu.

9. Data retention

We keep the limited operational records needed to run the Service (such as issued-credential records and payment confirmations — never card numbers, and no personal profile data at rest). Anonymized server logs are deleted within 14 days; undelivered message envelopes within 30 days; upload staging areas within 24 hours. Information written to the blockchain or IPFS is permanent and outside our control. Issuer application materials are handled as described in Section 4.

10. Your choices

You control what your profile shows and can edit or hide entries at any time. For questions about the limited information we hold, contact us at the address below. Please note that we cannot alter or remove information that is already recorded on the blockchain or on IPFS.

11. Children

The Service is not directed to, and may not be used by, anyone under 18 years of age.

12. Changes and contact

We may update this Privacy Policy from time to time; the "Last updated" date above reflects the current version. This Policy is governed by the laws of the State of Texas, United States. Questions or requests: privacy@freeholdip.com.