01Private by default
Mutually verified relationships and unilateral, unverified records are kept separate. A third party can normally verify only a Marrel ID and its one-person-one-ID status. A controlled snapshot is shown only after the owner enables access and the order settles. Partner identities, photos and other relationships remain hidden.
02One person, one ID
Sign-in uses a device Passkey—no SMS and no wallet required. A personhood provider handles document and liveness checks. Marrel retains a stable, non-readable digest to prevent a deleted account from creating another identity. Fingerprints, face unlock data and original identity documents are not placed on the public chain.
03Photos and evidence
During mutual confirmation, a controlled service checks only that the image contains exactly two faces; it does not prove who those faces are. The photo is processed under access controls and stored encrypted. Standard paid lookups do not include it. Do not upload location-bearing media or photos you have no right to use.
04On-chain data and USDT
The public chain contains commitments, state roots and verifiable receipts for encrypted records—not names, phone numbers, Marrel IDs, original photos or vows in plain text. A paid service opens in USDT only when the page creates a valid order. Ordinary use needs no wallet. Public chains and payment providers retain their own records.
05Deletion and retention
A signed-in user may request account deletion. After security checks and any unsettled financial duties are handled, the account is closed, credentials are revoked and erasable data is removed. An anonymous one-person-one-ID tombstone and relationship, gift, payment, audit and chain records remain. Appeals may correct, restrict or dispute a display, but cannot erase a mutually confirmed historical fact.