ZERO-KNOWLEDGE
ARCHITECTURE.
EntryCheck is a navigational signpost, not a data harvester. We built this system to operate without knowing who you are.
Last updated: 11 June 2026
1. Data Controller
EntryCheck.org operates as the Data Controller. For any privacy inquiries or to exercise your data rights, contact us at privacy@entrycheck.org.
2. Processing Basis
Our legal basis for processing technical data (IP addresses) is Legitimate Interest, specifically for maintaining site security and preventing fraud. We do not use this for marketing.
3. Local Storage
We use browser-side Local Storage to remember your interface preferences (e.g. Protocol Acknowledgment). This data resides solely on your device and is not transmitted to our servers.
4. Your Data Rights
Under GDPR/UK regulations, you have the right to access or erase personal data. As a website visitor, EntryCheck operates on a non-identifiable basis: we do not store personal profiles or website accounts, so we hold no personal data repository to export or delete. (Developer API customers are managed via RapidAPI, see section 6.)
5. AI-Assisted Search
When you use the optional "Ask EntryCheck" AI feature, the text you type is sent to Google's Gemini API to generate a response. We do not attach your identity to these queries or build profiles from them. Please avoid entering personal details into the AI box; Google processes this input under its own terms.
6. Developer API & RapidAPI
Our Developer API is distributed through RapidAPI, which manages developer accounts, API keys, and billing on our behalf as a data processor. If you subscribe, your account and payment data are held by RapidAPI under their privacy policy. Our API receives request data (such as the URL being checked) and IP addresses, used only for security and rate-limiting.
Retention Policy
We adhere to the principle of Data Minimization. We do not archive your search history. Technical logs (IP addresses) are retained solely for security auditing and protecting the integrity of the registry, kept only for the duration required by standard security protocols.
Third Party Boundary
Once you click a verified registry link, you enter a third-party government domain. We have zero visibility into their data practices and recommend reviewing their local privacy notices.