Check the receipt yourself. Especially this one.
A privacy receipt is our claim that we did something to your data – fulfilled a request, or erased an account. A claim like that is worth exactly as much as your ability to check it without us. So: the receipt is signed, the keys are published, and this page does the arithmetic in your browser.
Verify a receipt
Drop in the JSON your data-rights page saved, or the one attached to a deletion. Two questions are answered separately: whether the signature is ours, and – when the receipt carries an anchor – whether its hash was in the batch that was timestamped.
The receipt is read in this browser and checked here. It is not uploaded. The only request made is for our published public keys, which anyone can fetch — a verdict we produced for you would not be an independent one.
The keys are at /.well-known/privacy-receipt-keys. Anyone can fetch them; nothing about a public key set is privileged. If this page and your own code disagree about a receipt, your code is the one to trust – that is the point of publishing the keys.
Trustvice 360