Privacy

The principle: zero personal data in the registry

The global PARCID registry describes units in transit, not people. The content of the shipping label (names, addresses, phone numbers) never enters the database. A unit’s physical signature only describes its geometry, weight, cardboard texture, tape, label position and print defects: OCR text, decoded barcodes or label crops are forbidden.

The public resolution of an identifier never shows images, dimensions, weight, private references, who enrolled it or addresses.

Raw evidence

Photos, videos or point clouds uploaded at enrolment might contain personal data (for example, a label visible in a photo). That is why:

• they are stored encrypted and read only by whoever holds the owner key;
• on the free tier they are kept for 30 days and then deleted, leaving only their SHA-256 fingerprints (proposed period, pending decision);
• the owner can ask for their deletion at any time.

Fingerprints and the physical signature are not deleted: they are not personal data and let third parties verify records.

Whoever enrols a unit declares they send no personal data outside the images. If you pick files in this site’s developer form, your browser computes their fingerprint and the files are not sent.

API call log

Every API call is recorded in the operator’s activity log, for security, usage limits and to be able to prove the service. Keys are masked and the IP address is stored only as a salted fingerprint, never in clear. Retention period: [pending].

The owner key

The registry stores only the SHA-256 fingerprint of each key. There is no account or personal data behind it: if it is lost, it cannot be recovered. The key is always sent in a header, never in the URL, and this site does not store it in your browser.

This website

It uses no cookies or third-party services: fonts and every script are served from the site’s own domain. If you switch between light and dark mode, your browser remembers that preference in its local storage; it never leaves your device.

Cookie-free measurement. To know which pages are read, each visit sends the registry only three things: the page path, the domain you came from (if any) and the language. There are no identifiers, nothing is stored in your browser and the IP address is not stored (to curb abuse only a salted fingerprint is counted per minute, then discarded); resolution paths are counted together, never per PID. If your browser asks not to be tracked (Do Not Track or Global Privacy Control), nothing is sent. Figures are published in aggregate.

Checking in Bitcoin. The Verify page has an optional button that asks a third party, blockstream.info, for the header of a Bitcoin block. It only happens if you press it; that request reveals your IP address and which block you look at to blockstream.info, but not the PID.

Controller and rights

Controller: [legal entity pending], current operator of the registry (Know Your Parcel), Spain. You can exercise your rights of access, rectification, erasure, objection, restriction and portability through the contact page. You can also complain to the Spanish Data Protection Agency (aepd.es).