Privacy Policy

1. What data we collect

WEDJAT is designed to collect as little as possible. We do not ask for, and do not store, personal profiles, contact details, health information, or any special category personal data.

a. What you submit

• A target endpoint to check. When you ask WEDJAT to verify a server, you provide the public URL or endpoint of that MCP or A2A server (for example https://example.com/mcp). This is a public machine address, not information about you.
• An optional consent flag for whether WEDJAT may issue a live tool call to the target endpoint during measurement.

b. What is generated automatically

• Standard request logs. Like any web service, our infrastructure (Cloudflare) processes the requesting IP address, timestamp, and user agent for the limited purposes of security, abuse prevention, and rate limiting.
• Measurement records. The result of a check (the verdict, the conditions measured, and a SHA-256 hash of the canonical record) is written to a public ledger so that the result can be independently recomputed. These records describe the checked server, not the person who requested the check.

We do not collect health data, we do not run diagnosis, we do not build profiles of users, and we do not accept any personal symptom or medical input.

2. How we use data

• To perform the verification you request: measuring an MCP or A2A endpoint against a fixed set of deterministic conditions (genuineness, disclosure of who funds it, jurisdiction, and consistency of responses).
• To produce a reproducible, publicly verifiable record of that measurement (SHA-256 hashed) so results are not a black box.
• To keep the service available and safe (rate limiting and abuse prevention from standard request logs).

We do not use data for advertising, profiling, or resale, and we receive no referral or listing fees from the servers we check.

3. Who we share data with

• No sale, no referral fees, no advertising partners. We do not sell or rent data and we take no compensation from the servers we measure.
• Infrastructure processor: the service runs on Cloudflare, which processes requests on our behalf as a hosting and network provider.
• Public ledger: measurement records about checked servers are, by design, public so anyone can verify them. They contain endpoint and verdict data about servers, not personal data about users.
• We disclose data only where required by applicable law.

4. Retention

• Measurement records are retained for as long as the public verification ledger exists, because their purpose is long term reproducibility of a verdict.
• Standard request logs are retained only for the short period needed for security and rate limiting, per our infrastructure provider's defaults, and are not linked to a user identity.
• We hold no personal data set that accumulates over time about an individual user.

5. Your controls and rights

• WEDJAT has no login and no user account, so there is no stored personal profile to access, correct, export, or delete.
• If you believe a public measurement record is inaccurate or out of date, you can request a re-measurement, or a correction with evidence, and a corrected or retracted record will be published with its evidence.
• For any question about this policy or a specific record, contact us using the details below.

6. What the tools actually do (current inputs and outputs)

This policy reflects the live behaviour of the service:

• Input: a public server endpoint to check, and an optional consent flag for a live tool call.
• Processing: the endpoint is measured against fixed, deterministic conditions.
• Output: a verdict, the conditions checked, and a SHA-256 hash of the canonical record, plus a public ledger entry for that server.
• Never: no medical or truth judgment, no product recommendation, no personal or health input accepted, no personal data stored.

7. Children

WEDJAT is a technical tool for verifying software servers and is not directed to children.

8. Changes to this policy

If this policy changes, we will update the version and effective date at the top of this page.

9. Contact