Privacy

How we handle your information

Last updated October 21, 2026

Privacy is not paranoia. It is protection. This is how we treat your information, on both of our sites (ibgfortified.com and bestfortifiedpay.com):

• No cookies of ours, and no tracking. Our pages set no cookies and need none to work. They run no analytics, advertising trackers or third-party scripts of ours, and they load everything, fonts included, from our own web address. Both sites are delivered through Cloudflare, which handles each request on its network and keeps its own records. The section "Who handles your request" below says what that means. When you pay, you go to Stripe's own page, which follows its policies, not ours.
• We do not sell information about our customers, clients or visitors. Not to data brokers, advertisers or any other company, and we do not rent or trade it either.
• We do not buy it either. Buying and selling people's personal information, sensitive details above all, is often legal. We think it is wrong, so we do not do it.
• We keep as little as we can, and this policy says what we keep and for how long.

What changed on October 21, 2026. An earlier version of this policy said our own servers kept access records and a security log. Both sites now run on Cloudflare's network. We no longer run web servers, so we no longer keep either one, and the sections below now describe how Cloudflare and our email provider handle your information. We collect less than before, not more.

This policy covers this website, ibgfortified.com, operated by Best Pay LLC, Fort Worth, Texas ("we", "us"). Our other site, bestfortifiedpay.com, follows the same principles above and the same shared sections below, with additions for what it does that this site does not: taking orders and payments, and running the Watertight Integrity marketplace.

What this site collects

• Nothing through the pages themselves. There are no forms, accounts, cookies, analytics, advertising trackers or third-party fonts or scripts on this site. Its pages make no requests to other websites.
• No server records of our own. We do not run a web server, and we do not keep access records or a security log. Cloudflare delivers this site and keeps its own records, as described under "Who handles your request" below.

The verifier and the fingerprint tool run in your browser

When you use the verify page or the fingerprint tool, the receipts, keys, timestamp tokens and files you paste or choose are processed inside your browser. They are not sent to us or anyone else. The pages' content policy forbids network requests.

If you email us

If you email ibg@bestfortifiedpay.com, we receive your email address and whatever you choose to send. We use it to reply and to carry out any work you ask for. Please do not send client names, confidential details or protected health information in a first email. If you join the pilot, a separate written agreement says what we receive, how long we keep it and how it is deleted. Our email is provided by a hosted email service, which stores the messages for us.

We keep emails for as long as we need them to do the work you asked for and to keep ordinary business, tax and legal records, and then delete them.

Sealed records are permanent

If you ask us to seal something, the sealed record is append-only by design: an entry cannot be changed or deleted later, by you or by us. That is what makes it checkable by someone who does not trust us. So wherever you can, seal a fingerprint of a file rather than a document that carries personal details. The fingerprint tool makes one without sending the file anywhere. We will talk this through with you before we seal anything for a pilot.

Buying from us

Purchases are arranged on bestfortifiedpay.com or by email with us, and that site's privacy policy lists what it collects. This site does not take payments.

Who handles your request

Both sites are delivered through Cloudflare. When you open a page, your request goes to Cloudflare's network, which sends our pages back to you. To do that, and to protect against attacks and abuse, Cloudflare necessarily sees your IP address, the time, the page you asked for and your browser type, and it keeps records of connections under its own policies, which we do not control. The networks your request passes through may do the same.

We do not run a web server of our own, we do not keep access records, and we do not run any logging, analytics or tracking of our own. Cloudflare's dashboard shows us totals, such as how many requests a site received and roughly which countries they came from, and it can show us a security event, for example a blocked request, which may include an IP address. We look at these only to see whether our sites are working and to protect them, and we do not use them to identify or follow visitors.

Cloudflare's security systems may, rarely, ask a visitor who looks like an automated or attacking program to pass a check, and that can involve a cookie that Cloudflare sets. Our own pages never set one.

Sharing

We do not sell personal information, we do not buy it, and we do not share it with advertisers or for marketing. We share it only with the companies that help us run our sites, and only so they can do that:

• Cloudflare, which delivers our sites;
• the companies that carry and store our email;
• Stripe, our payment processor, where you pay online. Its own privacy policy governs the payment details it collects directly from you.

We may also disclose information if a law, a court order or a valid legal request requires it, or to protect our rights, our systems or other people from harm.

Security

Our sites are served over secure HTTPS connections. No system is perfectly secure, and we cannot promise that nothing will ever go wrong. If you find a security problem on either site, please tell us at ibg@bestfortifiedpay.com before you tell anyone else, and we will respond as soon as we can. Our security contact is also published at /.well-known/security.txt on each site.

Your choices and your rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete what you have sent us, by writing to ibg@bestfortifiedpay.com from the address in question. We will answer within 45 days. We will do what you ask unless we are required to keep the information, or need it to keep an accurate record (for example, order and payment records we must keep for tax and legal reasons, and sealed records, which cannot be edited entry by entry). Cloudflare and our email provider hold their own records under their own policies, and you would need to ask them about those. If you live in Texas or another state with a privacy law that gives you rights, write to us and we will honor the rights that law gives you.

Because our own pages do not track you, there is nothing of ours to opt out of, and a "Do Not Track" or Global Privacy Control signal changes nothing on them.

Children

Our sites are not directed at children, and we do not knowingly collect information from children.

Changes

If we change this policy we will change the date above and post the new version here. If a change means we collect more, or use what we hold in a new way, we will say so at the top of this page.

Contact

Best Pay LLC, Fort Worth, Texas. ibg@bestfortifiedpay.com. See also our Terms of Service.