Privacy

Transparent by design. Minimal by default.

What Vera Collects

Vera captures the minimum data needed to produce meaningful integrity evidence:

Process names, file paths, and publisher signatures (identifies what software was running)
Loaded kernel driver inventory (surfaces drivers operating at the highest privilege level)
Integrity posture flags (Secure Boot, HVCI, and testsigning status)
Session timing and duration (establishes when activity occurred)
Anonymous device identifiers (links sessions to hardware without personal info)

What Vera Does NOT Collect

No keystrokes, mouse input, or controller data
No screenshots, screen recordings, or webcam capture
No personal files, documents, or browsing history
No network traffic inspection or packet capture
No memory scanning, code injection, or game modification

Public by Design

Your profile is public by design, permanently, and every session is part of that open record. That openness is the whole point: a record only proves something if anyone can inspect it. There is no private tier and no per-session privacy, because a record you could hide or curate would not be proof. The limits are on what gets collected at all, never on who gets to see it.

Data Retention

Proof data is retained so the public record stays verifiable over time. You can request removal of your data, and device provisioning tokens expire after use rather than being stored long-term.

Third-Party Services

Vera uses AWS for cloud storage and database hosting, Vercel for web hosting, and Resend for magic-link authentication emails. We measure traffic with Vercel's cookieless, aggregate analytics: pages viewed and how fast they loaded, never who you are. No cookies, so no consent banner, and nothing that follows you across the web. No data is sold or shared with advertisers. The collector agent contains no analytics or advertising trackers, and the website uses no cross-site or advertising trackers.

Full Privacy Policy

This page is the plain-language overview. For the complete legal detail — your rights, retention, sub-processors, and how to make a request — see the full Privacy Policy and our Terms of Service.