Privacy notice
Last updated August 2026.
The short version
You can verify a document without telling us who you are. We don't ask for your name, we don't require an account, and we don't build a profile of you. We do keep a technical record of verification attempts, because that is how we catch someone working through document IDs one by one looking for a hit.
What we record when you verify a document
- The document ID you searched for, or the fact that a QR code was scanned
- The result — genuine, superseded, revoked, or no record
- The date and time
- A one-way hash of your IP address, not the address itself. We can tell that two searches came from the same connection; we cannot turn the stored value back into an address.
- Your browser's user-agent string, and the page you arrived from if there was one
We use this for two things: spotting enumeration attempts, and spotting documents that keep failing to verify — a cluster of failures on one reference usually means either a printing error on genuine documents or a forgery in circulation.
What we record when you contact us
If you use the help form or the fraud report form, we keep what you send: your name and contact details where you gave them, your message, and any files you attached. Attachments are stored privately and are never publicly accessible.
If you choose to report fraud anonymously, we do not store your name, email address or phone number at all — not hidden, not stored. They are discarded.
What we never do
- Sell or rent anything we collect
- Use verification records for advertising or profiling
- Tell the document's owner who has been verifying it
- Tell you who a document was issued to
Cookies
The public portal sets one session cookie, which exists to protect forms against cross-site request forgery. There are no advertising or tracking cookies. Staff signing into the admin panel receive an additional authentication cookie.
How long we keep it
- Verification records — 12 months, then deleted automatically
- Help requests and fraud reports — retained while the matter is open, then for as long as we may need them for legal or investigative reasons
- Document records — for the life of the archive, because that is the point of it
Your rights
Ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted. Email contact@unibagency.com.
One honest limitation: because verification records are keyed to a hashed IP address rather than to an identity, we usually cannot connect them to a person even when asked to. That is a deliberate consequence of collecting as little as possible.
Contact
Uni B Agency · Douala, Cameroon · contact@unibagency.com