Privacy

The Portal Mesh Registry is run by Jubilee Software, Inc. This draft explains what it collects, what it publishes on purpose, and what it never keeps.

What is public by design

A portal name exists to be found and verified. For every name that has been born, anyone can see:

the name, its permanent ID, its status and its records (endpoints, persona fingerprints, sources and the like);
its certificate (a certificate of birth, a property certificate or an experience certificate): the public owner label, the relationship label, the date of birth, the public key and the persona fingerprint where one applies.

The public owner label is the name you choose for certificates. Your email, your organization's private contact and your verification documents are never published.

What the registry keeps privately

Your Jubilee ID identifier, email address and account type.
For organizations, the accountable point of contact you give.
A two-factor secret, stored sealed.
Payment records from Stripe: the amount, the date and Stripe's reference. Card details stay with Stripe.
An audit log of every change to a name, kept so that every action can be traced.

Verification documents

Identity and organization evidence is stored only until a reviewer decides. The moment a decision is made, the files are deleted. Only the result, the reviewer and the date remain.

Keys

Each name's private key is made in your browser and sealed with your passphrase. It never reaches the registry, so the registry cannot read, use or recover it.

Cookies

The registry sets one cookie, pm_session, to keep you signed in. It is not used for advertising or tracking. Cloudflare Turnstile checks that registrations come from a person.

Your choices

You can change your public owner label, retire names, and ask for your account to be closed. Retired names and their certificates stay on the public record, because a permanent ID is never reused.
Questions and requests go to Jubilee Software, Inc.