A clear view of your data.

Updated September 2026

What the website stores

When you register, GroundTruth stores your name, email address, optional organization, trial interest, registration date, and acceptance of the trial terms. Passwords are stored as salted scrypt hashes. Session cookies keep you signed in; the server stores a hash of each session token.

Session and request data

The website retains hashed network identifiers briefly for abuse controls; hosting and proxy logs may also record request metadata. DMG download alerts send sanitized download paths, timestamps, response status, transferred byte counts, and client IP addresses to the operator’s Slack workspace. Other requests do not trigger Slack alerts. Passwords, session cookies, request bodies, URL queries, and private download tokens are excluded.

Where registration data lives

Data is stored on the website’s server-side database. The self-hosted deployment uses its own persistent database and backups. The website does not request wallet keys, seed phrases, or transaction signatures. No advertising trackers have been added.

Your account

Signing out invalidates the current session. The same account can sign in to the desktop app when connected to this server. No marketing email or payment is sent by registration. For account recovery, correction, or deletion, contact the operator who provided this site.

Desktop privacy

The desktop app can store case files on your Mac or on a connected GroundTruth server. Live investigations send the selected public address to network RPC and explorer providers. Saved cases include public observations and your analyst notes. Third-party intelligence sources have their own licensing and data-handling terms; review those terms when defining your integration scope.