Your data: ask for a copy, a correction or a deletion

Last reviewed 29 October 2026.

You can ask what KolTheia holds about you, ask us to correct it, ask us to delete your account's details, or ask us to hide a capture from your account. It costs nothing. There is no button for it yet: you ask by email and a person does it.

How to ask

1. Write to koltheia@ottxp.com from the email address on your account. Start the subject with "Data request".
2. Say what you want: a copy of your data, a correction (say what is wrong), deletion of your account's details, or hiding particular captures.
3. We may ask you to sign in, or to confirm something only the account's owner would know, so that nobody can ask for someone else's data. If you cannot write from the account's address, say so and we will find another way to check it is you.
4. We reply within 30 days and tell you what we did.

What you get if you ask for a copy

The email address and username on your account, the devices on it, the list of your capture records with their proof codes, labels and times, and your account's security activity. We never held your photos or videos (see the privacy notice), so there are none to send. We cannot send back a password, because we do not hold it: only a scrambled hash of it.

What deletion does

• Removed: your email address, username, password hash, passkeys, emailed codes, and your account's security activity. After this you cannot sign in, and your username no longer appears on your captures' certificates.
• Capture records are not erased. A record is the proof: it holds no photo, video or exact location, and proof that could be quietly removed would not be proof. Each record is sealed together with its device and its owner, so the records keep an empty account entry (no email, no username, no name) and your device's public key and name, which are needed to check the signatures. Nothing in them identifies you except the label you gave a capture.
• Hiding a capture: you can hide a capture yourself on My Captures (and show it again later), or ask us to. It is then no longer listed in your account, and your username and the area no longer appear on its certificate page. Hiding cannot reach copies other people hold. Anyone who already has the photo or video, or its proof code, can still check it and find that it is a genuine, sealed record, with its times and fingerprints. That is how a record works, and it is why we say so before you ask.
• Things we cannot take back: a certificate or file someone already saved or shared; the public log, which is meant to keep its entries; a time-stamp that a public time-stamp authority has already signed (it holds only a file's fingerprint); and the exact spot of a located capture, which is on your phone, not with us.
• Backups and logs: deleted account details can remain in the encrypted nightly backups for up to 7 days (the server keeps the last seven), and in KolTheia's own log for at most 30 days, or in the server's system log until its oldest entries are deleted.

If you are not satisfied

Write back and say so. You can also complain to the data protection authority where you live. Where the law gives you more rights than are listed here (for example in the UK or EU), they apply.