Privacy Policy

Because profiles are public by design, anything you type into a public field can be copied by anyone who sees it. Do not enter anything you do not want shown.

• Public: your name, company, industry, website address, the city you gave (if any), your title (shown as Founder), whether you are verified and the date you were verified. Public information appears on your profile page, in the registry lists, in search engines and on your badge and credential.
• Private: your email address, your private link secret, any recovery codes, your order number and your verification code.

We do not sell your personal data. We do not use it for advertising and we do not build profiles of visitors.

• To publish your record and keep it online.
• To check that you control your website, and to issue your credential and badge if you upgrade.
• To email you your private link, and to send a recovery email if you ask for one. We do not send marketing email.
• To take payment and to remove verification if a payment is reversed.
• To stop abuse, for example by limiting how many records one email address can create and how often recovery emails can be requested.
• To meet legal obligations.

When you press Check Backlink, our server looks up the DNS records of your domain and requests the web page you listed over HTTPS, looking for the Entruv badge link. Our crawler identifies itself as EntruvRegistryCrawler/1.0. The request is made only to public addresses, follows a short limit of redirects, and is rate limited. Nothing else on your site is read or stored.

We set one functional cookie for each record you manage, named entruv_owner followed by the record address. It holds your private link secret so you stay recognised as the owner on that browser. It is HTTP only, so page scripts cannot read it, and it lasts up to one year or until you clear it.

We set no analytics, advertising or tracking cookies. Our payment provider may set its own cookies on its checkout page, which is covered by its own policy.

We use a small number of providers to run the service. They process data only on our instructions and under their own privacy terms.

• Dodo Payments, as the merchant of record, for payments, tax and receipts.
• Our database and hosting providers, to store records and serve the website.
• Resend, to deliver your private link and recovery emails.

We keep your record for as long as the registry runs or until you ask us to remove it. If you ask, we delete your record and its private data. Short lived copies may remain in backups for a limited time before they are overwritten. Payment records are kept by our payment provider for as long as tax law requires.

Depending on where you live you may have the right to see the data we hold about you, correct it, have it deleted, object to how we use it, or receive a copy. We do not sell personal data, so there is nothing to opt out of in that sense.

There is no self serve edit or delete button yet. To use any of these rights, contact us using the details below from the email address on the record, and we will respond within 30 days. If you are in the European Economic Area or the United Kingdom you can also complain to your local data protection authority.

The site is served over HTTPS. Private link secrets are random, 256 bits long and stored only as hashes. Recovery codes work once and expire after an hour. No system is perfectly secure, and anyone who holds your private link can manage your record, so keep it private.

The registry is for business owners. It is not meant for anyone under 18, and we do not knowingly collect information from children.

If we change this policy we will update the date at the top. If a change is significant we will say so on the homepage. You can read the terms of service and the refund policy alongside it.