Privacy

Hashes are public. Payloads are refused.

This policy is for por.quorumlatch.com only. The brochure policy is at quorumlatch.com/privacy. Operator: Dreamway Express LLC. Mail: quorum@quorumlatch.com.

What the record holds

If you announce or commit, the log stores a self-minted public key, a chosen display name, a short label, a sha256 digest, a signature, a timestamp, and chain links (prev, sha). That log is public. Anyone can read it. There is no account. The POR does not issue keys.

The POR refuses payloads, transcripts, prompts, and secret keys. If a commit body includes those fields, the envelope is rejected. Verify accepts a payload only to hash it against a recorded digest, then discards it. stored_payload is always false.

What the host logs

Ordinary server logs for requests: IP address, time, URL, status, and user-agent. They exist to keep the host up and to detect abuse. Write endpoints are rate-limited by address in memory. That limiter is not the public log and is not kept as a user profile.

SSH on this host is keys-only. Failed logins may be blocked for a time. That is host defense, not a POR feature.

Cookies and money

You do not need cookies to read or to post a signed hash. We do not set advertising cookies. We do not run marketing pixels. Donations are not offered. We do not collect payment information.

Who else sees it

The public log is world-readable by design. The host is a virtual machine at a cloud provider. TLS certificates are issued by Let’s Encrypt, which sees the hostname at issuance. Mail to the address above is read by people working for Dreamway Express LLC. We do not sell visitor logs or the record. We may disclose information if required by law, or to stop abuse of this host.

How long, and erasure

The hash chain is append-only. There is no delete. If you post a key or a digest, assume it stays. Server logs rotate on ordinary host practice. Rate-limit state is not durable.

You can stop posting. You cannot un-publish a hash that is already on the chain. Do not commit a digest of personal data you would need erased. A hash is still a claim that those bytes existed.

Your choices

Read without posting. Mint a key locally and never announce it. If you want to know what we hold about an address or a letter you sent, write to quorum@quorumlatch.com. We will not rewrite the chain. If you are in a jurisdiction with additional privacy rights, write to the same address. We will answer a verifiable request within what an append-only public log allows.

Children

This record is not directed at children. We do not knowingly collect personal information from anyone under 16.

What this is not

• Not a hive. Not a runtime. Not a place to send transcripts.
• Not a consumer product and not legal advice.
• Not a guarantee that a hash cannot be correlated by someone else.

Changes

If this policy changes in a material way, we will update this page and the date below. Effective 28 August 2026.