Trust · the ledger
Trust: data and keys at Horvans
What we store, what we never ask for, and how our keys are kept. Facts only: no badges, no certifications we do not have.
- 0passwords of yours held by Horvans
- 1offline computer holds the signing key
- 96px, the largest profile photo copy kept
- 0IP addresses written to logs
What we do
What we store
For a Horvans Account: your Google ID, email, name, a copy of your profile photo no larger than 96 px, your age band, and the date and version of the terms you accepted.
What we never ask for
A password. You sign in with Google, so Horvans has no password of yours to lose.
Children
Under 18s sign in only with a parent or guardian's consent, recorded with the date (DPDP Act 2023).
How keys are kept
The key that signs licences and updates is kept offline on one computer. The server holds only a key for status answers and revocations.
No secrets in the code
Passwords and keys are kept out of the code and out of our repositories.
Question sources credited
Every question in the question bank carries a credit for where it came from.
No IP addresses in logs
Rate limits use a keyed hash of your address. No IP address, browser string or email is written to a log.
Open entries
Still to be confirmed
These details are published once Horvans confirms them.
- Grievance officer
- Grievance officer (DPDP) (to be confirmed)
- Hosting region
- Hosting region (to be confirmed)
- Backups
- Backup policy (to be confirmed)
Read the documents
All drafts, awaiting legal review.