Proof Gallery privacy
Your proofs stay in the folders you choose.
Exact prepared scope for 0.3.0-beta.3; the site-wide privacy notice also applies to purchase, delivery, and support.
Local operation
The browser planner and Node builder require no Proof Gallery account, telemetry, analytics, hosted gallery, upload, or product network request. The builder reads only the declared manifest and JPEG, PNG, or WebP files under the explicit asset root, then writes one new destination folder chosen by the operator.
Unchanged proof bytes
Proof Gallery copies declared proof bytes and verifies them. It does not decode pixels, inspect or remove metadata, make thumbnails, retouch images, scan unrelated folders, overwrite an existing destination, or delete an incomplete folder automatically.
Recipient privacy
The generated gallery is script-free and contains no tracking or access control. Anyone who receives the folder can view its contents, so the customer chooses what to include, how to deliver it, and whether another secure channel is needed.
Support
Do not send production photographs, private filenames, manifests, client names, or private links. Use a synthetic manifest and redacted error text whenever possible.