Privacy & data protection

By opening an account you consent to your marriage status being publicly searchable. This is the purpose of the registry: preventing people from hiding a marriage.

What we store

• Your national ID number only as a one-way secure code (HMAC-SHA256) plus its last 4 digits. The full number is never stored in readable form.
• ID card images, the marriage certificate and divorce/death documents are kept in a private store that only the registrar can open. Every opening is logged.
• Your fingerprint is never uploaded. Your device keeps it; we keep only a public key (WebAuthn / passkey standard).
• Private documents are encrypted at rest (AES). Even someone who copies the server disk cannot read them without the key.
• Every uploaded photo is re-processed to remove hidden metadata such as GPS location and phone model.
• On the Security & privacy page you can see which government agencies opened your record and when, and download all your data.
• The audit log is tamper-evident: each entry is hash-chained to the previous one, and the database refuses edits or deletions.
• Records are never deleted. Changes are made only through approved corrections, and the history stays in the audit log.

What the public sees

Only people with an active, verified marriage, with: photo, name, country and area address, religion, year of marriage, which marriage it is (1st, 2nd…), and the current spouse with the same basic details. Never documents, parents, date of birth or ID numbers.

Government access

Officers are issued accounts individually. Every lookup requires a stated legal purpose and is logged permanently. Officers never see ID card images or full ID numbers.

Your rights

You can see your full record, request corrections, and report divorce, death or a missing spouse. Contact the registrar through the Messages page.