ConsentProof privacy policy

Last updated: 27 October 2026. Plain language, not legal advice.

ConsentProof is a service of Agent Harbor LLC, a Washington (USA) limited liability company ("we", "us"). This explains what ConsentProof collects, why, and what you can do about it. Questions: brian@agentharbor.agency.

What we collect

Your licence key and account. You sign in with a Polar licence key. We store the key only encrypted (so we can re-check it with Polar about once a day), a one-way hash of it, the plan it grants and when we last checked it. We create an account the first time a valid key is used. We do not ask for a password.
Your settings. The alert email address you give, an optional webhook address (and its signing secret, stored encrypted and shown to you once), and on the Agency plan the brand name and "prepared by" text you want on reports.
The sites and pages you list. The web addresses, the label you give each page (for example "portal login"), the schedule, and your confirmation that you own the site or are authorised to test it, with the time, your account id and the version of the wording you saw.
What a scan observes. For each scan we keep a technical report of what a browser did on that page when visiting logged out: the addresses of requests it made, the names of cookies that were set (never their values), consent-banner signals, and screenshots of the page. A page can show whatever its owner put on it, so a screenshot can contain whatever was visible to any logged-out visitor. We do not log in, fill in or submit forms, or open pages behind a sign-in.
Pages the sensitive-page checks fetch. For the healthcare and children's-site checks we also fetch your homepage and the privacy notice address you give, as plain pages, and keep a hash of what we read and the check results.
Free one-off check. The web address you enter, your confirmation, the time, and a one-way hash of your network address (to apply a daily limit). The result is reachable only through a link with a random token. No account is created.
Security data. Short-lived counters keyed by a one-way hash of your network address or licence key, used only to rate-limit checks. They expire within two days. We do not use analytics, advertising or tracking tools, and we do not sell or rent personal data.

Why we use it

To run what you signed up for: scanning the pages you list, comparing scans, sending alerts, producing evidence reports, applying your plan, preventing abuse, and answering you.

Who processes it for us

Cloudflare hosts the service, its database (D1), file storage (R2) and the human check on the free form (Turnstile).
Resend delivers alert emails.
Polar sells the plans as merchant of record and issues licence keys. Polar handles payment details under its own privacy policy; we never see card details. We send Polar a licence key to check that it is valid.
The webhook address you choose receives the alerts you route to it.

How long we keep it

Scan reports and screenshots: 13 months, then deleted by a nightly job.
Evidence links expire after 72 hours. Cached copies of evidence PDFs (they can be re-rendered on request) are deleted after 30 days; screenshots and the report stay until the report is deleted.
If you delete a site, its pages are removed from scheduling at once; its stored reports are deleted with the 13-month clean-up or on request.
Free-check records: 30 days. Counters: two days. Encrypted database backups kept by Cloudflare expire within 30 days.
Request logging is limited to short-lived operational logs with internal ids and error messages, never licence keys or the addresses of the sites you monitor; per-request URL logging is switched off because evidence links carry a signature.

Sites we scan

The scanner identifies itself and obeys robots.txt. Page scans appear to a site as a normal browser user agent with AgentHarbor-ComplianceSignals/0.1.0 (+https://agentharbor.agency/compliance-signals) appended; the plain page fetches used by the sensitive-page checks send AgentHarbor-ConsentProof/0.1.0 (+https://agentharbor.agency/consentproof), and both names are honoured in robots.txt. It scans each registrable domain at most once per 10 minutes, and stops at any bot-protection challenge. We scan only sites whose owner or authorised representative confirmed they may be tested. If you run a site and did not expect this, write to brian@agentharbor.agency and we will add it to the opt-out list.

Your choices

Write to us to see, export or delete your data, or to remove a site from scanning. Washington residents and others may have rights under their local laws; we will honour a reasonable request whether or not a law requires it.

What this service is not

Technical evidence of observed behavior on the date tested. Not legal advice and not a certification of compliance.