Privacy policy

To run your account, Wall of Certificates stores:

• Your email address, username, and a hashed (never plaintext) password
• The certificate files you upload, and text extracted from them (via OCR) to help pre-fill the upload form — this extracted text is never shown publicly, only used to suggest form values you review before saving
• Basic display preferences: theme, layout, profile visibility
• A session cookie that keeps you signed in, and anonymized visit counts for your own public wall

We don't sell your data. We don't use your certificates or profile information for advertising. We don't scrape or import from LinkedIn, Credly, or other credential platforms.

Running Wall of Certificates relies on a small number of infrastructure providers, each handling only what's needed for their part:

• Turso — hosts the database (accounts, certificate metadata)
• Vercel — hosts the application and, via Vercel Blob, your uploaded files (stored privately, never publicly listable)
• Resend — sends account verification and password-reset emails
• Cloudmersive — scans uploaded files for malware before they're stored

None of these providers use your data for anything beyond providing their specific service to Wall of Certificates.

A certificate's visibility (public, unlisted, or private) is entirely your choice, set per certificate. Share links you create can be revoked or set to expire at any time. A watermarked preview (stamped with the viewer's name, or a generic label if they're not signed in) is shown instead of the original file whenever you've turned off downloads for a certificate.

You can edit or delete any certificate at any time from your dashboard. Deleting a certificate deletes its stored file as well. Account deletion removes your account and everything in it; see the Danger Zone in Settings.

Questions about this policy or your data: contact@wocerts.link.