Privacy Policy

Last updated: October 14, 2026

NPC Labs ("we") keeps this simple: we collect as little as possible, we never sell what we collect, and we use it only to run our services and answer you.

What we collect

• Messages you send us. If you use the contact form or email us, we receive your name, email address, and message so we can reply.
• Verification lookups. The Verified by NPC demo API receives the tag, credential, claim, or agent identifier you ask about. There are no accounts and no sign-in; we do not tie lookups to your identity.
• Images you check. If you use the image check, you send us an image or a link to one. We process it to produce an AI-generated signal: how likely the image is to be AI-generated, stated as a percentage. It is a signal, not a verdict. We do not keep the image itself. A one-off check stores nothing; when a check runs as part of a registration, the signal becomes part of that record (see Registrations below).
• Basic service logs. Our hosting provider records routine technical data (such as request times and error rates) to keep the service running.

Registrations

Anyone can register a piece of content or an AI agent with us. A registration creates a signed public record of what was submitted: the title and kind of content (or the name of an agent and its owner), where it lives, the creator's name, the date and time, and its status, which starts as registered, checks pending. When the locator is a link we can fetch, we fetch the content once at intake and record its SHA-256 fingerprint in the record. When a creator gives us a hash instead of a link, the record says so, and says we have not seen the content itself.

Registration asks for a contact email so we can reach the registrant and limit abuse. That email is kept on our servers only. It is never part of the signed public record, and it never appears in a lookup.

Lookups answer from these records, so we keep them. If you registered something and want it removed, email hello@npclabs.xyz and ask. We will answer.

What we do not collect

We do not run advertising trackers, we do not build profiles, and we do not sell or rent personal information to anyone.

How we use it

Your information is used to operate the site and the verification service, to respond to your messages, and to improve reliability. Nothing else.

Sharing

We share information only when the law requires it, or with the service providers who run parts of the service: our hosting platform, which serves the site and the API, and Sightengine, which performs the AI-generated analysis for the image check. When you check an image, the image (or the link you gave us) goes to Sightengine and a score comes back; that score is the signal we show you. We do not keep submitted check images as records.

Your choices

Email hello@npclabs.xyz any time to ask what we hold about you, to correct it, or to ask us to delete it. We will answer.

Changes

If this policy changes in a meaningful way, we will update the date above and note the change here.