Skip to the main content
Incident evidence · UK and Portugal04 · Your data, plainly
Figure 4. A shared copy with a bystander's pixels discarded; the sealed original untouched.shared copypixels discarded, not smudgedsealed original, untouchedretained until 26 Aug 2032
Figure 4. A shared copy with a bystander's pixels discarded; the sealed original untouched.

Your data, plainly

Recording people creates duties under UK GDPR and your shop carries them as the data controller. A tool built for evidence should make each duty straightforward to meet and to show. Plainly:

Private by storage
Evidence objects are private. An anonymous request for one gets a refusal.
Dated by default
Every sealed segment carries a retention date, written into the record itself.
Every action in the log
Every action taken through Witnal lands in the append-only custody log, views included.
Blurred before sharing
Uninvolved people are blurred out of any copy shared into a scheme. The blur discards pixels outright, so it cannot be reversed. The sealed original is never touched.
Nothing without asking
Beyond the essential sign-in cookie, nothing is set unless you accept analytics on the cookie notice. The contact form keeps what you send, with the time it arrived. Your theme choice stays in your browser.

Discard pixels yourself

Choose a photo from your device; it never leaves your browser. Drag a box over anyone who should not be in a shared copy and the pixels inside are downsampled away, the way Witnal does it. A blur could be reversed; this cannot.

The photo is read by your browser only. Nothing is uploaded.