PRIVACY
Marrel separates a lasting personal record from public exposure. You can see your own records; others cannot see your relationship count, partners, couple photos or timeline by default.
Mutually verified relationships and unilateral, unverified records are kept separate. A third party can normally verify only a Marrel ID and its one-person-one-ID status. A controlled snapshot is shown only after the owner enables access and the order settles. Partner identities, photos and other relationships remain hidden.
Registration verifies your email with a one-time code; later sign-in uses your email and password—no SMS and no wallet required. A personhood provider handles document and liveness checks. Marrel retains a stable, non-readable digest to prevent a deleted account from creating another identity. Fingerprints, face unlock data and original identity documents are not placed on the public chain.
During mutual confirmation, the server may send the re-encoded photo to an approved third-party face-count processor solely to check that exactly two faces are visible; this does not identify either person. The specific processor, retention and deletion period, processing region, and cross-border basis must be reviewed and disclosed here before production opens; production photo uploads stay closed until then. After the check passes, Marrel stores the photo privately in encrypted form as part of the mutual record. Standard paid lookups do not include it. Do not upload location-bearing media or photos you have no right to use.
The public chain contains commitments, state roots and verifiable receipts for encrypted records—not names, phone numbers, Marrel IDs, original photos or vows in plain text. A paid service opens in USDG only when the page creates a valid order. Ordinary use needs no wallet. Public chains and payment providers retain their own records.
A signed-in user may request account deletion. After security checks and any unsettled financial duties are handled, the account is closed, credentials are revoked and erasable data is removed. An anonymous one-person-one-ID tombstone and relationship, gift, payment, audit and chain records remain. Appeals may correct, restrict or dispute a display, but cannot erase a mutually confirmed historical fact.