Privacy Policy

What ReallyFrom.me does

ReallyFrom.me lets you approve a message with your device and publish a permanent record that anyone can check. We collect only what that requires.

Information we store

• Account information: your name, email address, username, and any optional profile details you add (job title, organization, bio, photo URL).
• Verified content: the exact text of each message you choose to verify, its cryptographic fingerprint, and the approval timestamp. This is the product — verification records are permanent and cannot be edited (they can be revoked, which marks them revoked without deleting them).
• Passkey public keys: the public half of the passkeys you register. Your face, fingerprint, and biometric data never leave your device and are never sent to us — we receive only cryptographic proof that your device authenticated you.
• Usage counts: aggregate events such as page views and checker usage, without message content.

The browser extension

• The extension reads a draft only when you click Verify on that draft. Draft content is sent to reallyfrom.me at that moment, over HTTPS, to create the verification you asked for.
• Checking messages you receive: when you open a message containing a ReallyFrom.me link, the extension checks it on your device. It downloads the public fingerprint of that verification and compares it locally. The message you received is never uploaded to us — we only learn that someone looked at a public verification page, exactly as if you had clicked the link.
• It does not read messages without a ReallyFrom.me link, other tabs, or your browsing history.
• Draft content is transmitted to reallyfrom.me only at that moment, over HTTPS, to create the verification you requested.
• The extension stores no passwords, tokens, or message content. Authentication happens on reallyfrom.me in your existing session.
• Extension analytics are limited to feature-usage events (e.g. “verify clicked”) and never include message content or recipients.

What we don't do

• We don't sell your data.
• We don't store biometric data.
• We don't read email you haven't asked us to verify.
• We don't track your browsing.

Public information

Your public profile and your verification pages are visible to anyone with the link. For verifications you mark private, the page shows that a message was verified without displaying its text. Revoking a verification marks it revoked but keeps the historical record visible.

Contact

ReallyFrom.me is built by AskHumans. Questions: privacy@askhumans.com.