The citizen portal

The citizen portal lives at my.agreely.ca. It is where a person concerned sees who holds what about them, approves or declines a use of their personal information, and withdraws consent at any time. The portal is a separate application, served at its own root paths, and it installs as a progressive web app (PWA) on a phone or a computer.

The portal serves private-sector companies and public bodies alike. For a public body, it says "organization" and cites the articles of the act that governs it rather than those of the private-sector act.

This section describes what the citizen can do:

• the dashboard, which answers "who holds what about me";
• withdrawal and erasure, the actions that stop a use, up to closing the account with a company;
• my consent log, which answers "what was done with my consents".

#An identity that is yours alone

The citizen's identity is a passkey (WebAuthn). It is bound to an opaque, tenant-less citizen DID, of the form did:agreely:citizen:.... That DID belongs to no company: it is the single point through which you see, from one place, everything you have consented to, without any company being able to correlate you across sides.

You never hold a private key file. The secret stays in your authenticator: Face ID, Touch ID or a hardware security key. The device, not Agreely, keeps the key. No email and no password is asked for.

#Registration

Creating an identity requires two things:

• a passkey with user verification and a discoverable credential (resident credential), so the authenticator recognizes the account without you typing an identifier;
• a 12-word recovery phrase, generated in your browser and shown only once. The words are deliberately in English: it is the standard word list used for recovery. You write it down (or download it) and confirm you have stored it safely before going on. It derives an ed25519 recovery key of which Agreely receives only the public part. No phrase and no private key can ever be received or stored by the server.

Registration is atomic: in one step it creates your identity, the passkey, the recovery record and the request for an on-chain identity anchor, which is recorded shortly after. If any step fails, nothing is created.

#Sign-in

Sign-in is a plain, standard WebAuthn assertion: your authenticator proves possession of the passkey, with no password. The registration and sign-in endpoints are rate-limited per IP address.

#Restoring access if you lose your passkey

If you no longer have your passkey (a lost or replaced device), the my.agreely.ca/recover page restores your identity with your recovery phrase:

1. you enter your 12 words, in order. Your browser signs a single-use challenge with the recovery key; only the signature and the public key are sent;
2. you create a new passkey on this device;
3. you receive a new recovery phrase, which always replaces the old one. All your old passkeys are revoked on every device.

Recovery keeps the same DID: your consents stay yours. It is anchored on-chain as a key rotation, and your dashboard shows the date of the last recovery, so you notice one you did not make.

#Approving a consent

A consent starts on the company's side. The company sends you a secure deep link. If you do not have an identity yet, the portal has you create one on the spot, then returns to the request. The portal then shows you each (category, purpose) cell: the category of personal information requested and the purpose it would be used for, with the company's information text. You accept or decline each purpose separately, which lets you consent to some uses and not others. You can also decline everything.

For a consent request about sensitive information (renseignement sensible), the portal requires a separate express-consent checkbox, because that consent must be given expressly. Once your choices are made, you approve the whole with your passkey: the same authentication ceremony serves as the signature of your consent.

A request can also contain purposes presented for information: purposes for which the company does not ask for your consent because it relies on another basis, which it states. Some requests are only a notice: no consent is asked, and you confirm with your passkey that you have taken note of it. That acknowledgment is not a consent.

When the person concerned is under 14, consent is given on their behalf by the holder of parental authority or the tutor, who affirms it in the request.

#The receipt

Once the approval is done, the portal offers you once to download your receipt: a JSON proof file holding the signed receipt, the exact offer you signed and the DID documents needed. It is verified in your browser, with no call to Agreely's server. A copy is also kept in this browser (not on the server), so you can download it again later from your dashboard on the same device.

#Claiming an offline consent

If you already consented on paper, that company-attested consent can be bound to your DID. The company gives you a single-use claim link and, where it applies, a reference code printed on your form, which you must also enter. The link expires 60 days after the company recorded your signed form. By opening it in the portal, once signed in, you link that offline consent to your identity, and it then appears in your dashboard, marked as a company-attested paper consent.