Privacy.
What Entros receives when you use entros.io, where it goes, how long it is kept, and what stays on your device.
Updated 27 October 2026
Who runs this site.
Entros Protocol runs entros.io and the verification services it uses. Entros is live on Solana devnet. Send questions and requests to contact@entros.io.
Entros asks for no name, email address, document or face image.
What stays on your device.
Raw motion recordings and the full-resolution touch stream never leave your device. Your device extracts features from each round and generates the zero-knowledge proof.
What a verification sends.
When you verify on entros.io, your browser sends the Entros verification service:
- Audio of the words you speak, one short clip per round.
- A 308-value feature summary, a pitch (F0) contour and an acceleration-magnitude contour, all computed on your device.
- A coarse 64-point outline of each path you trace, with no pressure and no timing.
- Capture timing and client signals, such as whether the browser reports automation or a virtual microphone.
- Your wallet address, session identifiers, digests and commitments.
- Your IP address and browser user agent, as every web request carries them.
- A message signed by your wallet when you request an attestation.
The verification popup that partner apps open runs the same three rounds. When it finishes, the partner app receives your wallet address, the attestation address, the transaction signature and your Trust Score.
What Entros keeps, and for how long.
- Spoken audio
- Transcribed by a speech model that runs inside the Entros validation service, to check that you said the words.
- Kept: In memory for the request only. Never written to storage or logs.
- Feature summary, contours, path outline and client signals
- Checked during the request.
- Kept: Discarded when the request ends.
- A 32-byte value derived from the feature summary
- Stored with your wallet address to spot the same evidence arriving again.
- Kept: 30 days.
- Failed attempts
- Your wallet address, a keyed hash of your IP address, a reason code and a derived value, used to limit repeated failures.
- Kept: 7 days.
- Verification sessions
- Keyed hashes of your wallet and IP address, the words and paths issued, digests and a result summary.
- Kept: 30 days, or 1 hour for a session that never starts a round.
- IP address and user agent
- Rate limits and abuse controls. Stored only as the keyed hashes above.
- Kept: Held in memory for up to 24 hours.
- Service logs
- The first six characters of your wallet address, a shortened IP address, capture timing and result summaries.
- Kept: 30 days, the log period of our hosting plan.
Entros does not keep the feature summary itself, the contours, the path outlines, the spoken words or a transcript.
What goes on Solana.
A completed verification writes public records to Solana devnet:
- Your Entros Anchor, a non-transferable token in your wallet.
- Your identity state: commitment, Trust Score, verification count and verification times.
- An encrypted copy of your baseline that only your wallet can unlock.
- Each verification result and the attestation that apps read, with its expiry date.
- The protocol fee you pay.
Anyone can read these records, and they stay on chain. Nobody can delete them, Entros included.
What your browser keeps.
- Your baseline (fingerprint, salt, commitment and time), encrypted with a key held in your browser. If the browser cannot encrypt it, it is stored unencrypted.
- Your theme choice and, on mobile, your wallet app's authorization.
- A note that you answered the study consent screen.
entros.io sets no cookies and runs no analytics or advertising scripts. Clearing this site's data in your browser removes everything above.
Population study.
Entros runs a devnet population study that you can join only through a consent screen. Intake on entros.io is closed at present.
A study record is encrypted and holds your wallet address, the derived fingerprint, the feature summary, check outcomes and timing. It holds no audio, raw motion, raw touch, traced path, words, transcript, IP address or browser identifier. Entros deletes each record 30 days after it is created. To have yours deleted sooner, write to contact@entros.io.
Questions and requests.
Write to contact@entros.io to ask what Entros holds for your wallet, or to ask for off-chain records to be deleted before they expire. Entros may ask you to sign a message with the wallet to show that it is yours.
The technology page explains each step of a verification.
Changes.
When the way Entros handles data changes, this page changes with it and the date at the top moves.