The dashboard

The dashboard answers one question: who holds what about me. It is a single, tenant-less read of your consent index, grouped by company (or by public body) in a master-detail view.

#The company list

At the top, three counters: the number of companies and organizations, your active consents, and the information held on a basis other than consent. The last two never mix: information a company holds without having asked for your consent is not counted as a consent.

Each company then appears on a row, most recently active first. The row shows:

• the company's logo, or its initials as a fallback when no logo is available;
• the number of active consents and, where there are any, of information held on another basis;
• the date of the last activity (a consent given, withdrawn, and so on);
• badges when the company holds an active cell carrying sensitive information (renseignement sensible) or tied to an automated decision (décision automatisée), and when the company is leaving Agreely or has left.

Each company is addressed by a salted identifier unique to you, never by the company's raw identifier. An identifier belonging to someone else returns a 404. That is what preserves unlinkability: even your own reference to a company cannot be used to link you to another person concerned.

The dashboard also shows your DID, the on-chain anchors of your identity (its creation and each access recovery), with a link to the transaction once the anchor is confirmed, and the date of your last access recovery, if there was one. The link opens BaseScan, a third-party site, which shows only an opaque fingerprint.

#A company's detail

Opening a row shows the company detail. The (category, purpose) cells are shown in the language you are viewing the portal in.

#Your consents

One row per purpose you consented to. If you consented to the same purpose more than once, the row carries the most recent consent and lists the dates of the others, because a withdrawal or an erasure reaches them all. For each row, you see:

• its status, its grant date and, where it applies, its expiry date;
• the sensitive information, automated decision and, for a consent signed on paper, weaker evidence badges;
• the source of the information when it was collected from third parties;
• the controls to withdraw your consent or request its erasure.

Withdrawn or expired consents are grouped under Past consents. When a withdrawal was recorded by the company at your request, rather than signed by your passkey, the row says so, with what to do if you did not ask for it.

#Information held on another basis

A separate section lists what the company declares it holds without relying on your consent: the declared basis, the justification it gave and how to object. Withdrawal of consent does not apply to it. Agreely records the basis the company declares; it does not certify its legal validity.

#The rest of the page

• The anchoring of your consent: the state of each purpose (active, withdrawn, expired, erased) and the link to the transaction on Base. Your receipt documents your consent; the anchor is a separate integrity trace that holds only an opaque fingerprint.
• The notices sent to you about the company's privacy policy, in the exact content that was sent. Agreely records the sending; it does not attest receipt.
• The consent document: the disclosure text, pinned to the version you consented under.
• Your rights and the person in charge: the person in charge of the protection of personal information (responsable de la protection des renseignements personnels), your rights, information on any automated decision and, when the company's request form is open, a link to it.
• Close my account with this company: see withdraw and erase.
• My consent log, limited to this company.

#Download the document you accepted

From the document section, you can download the PDF of the consent document you accepted, that is the disclosure pinned to its exact version. This PDF carries only your own consent context. It never contains the company's customer identifier or your DID.

#When a company leaves Agreely

A company can stop using Agreely. The portal tells you at each step:

• departure announced: the departure date is shown. Download before that date the PDF documents you want to keep; they will not be offered afterwards;
• service closed: you can still withdraw a consent or erase your information, but a new consent request, a claim or an account closure can no longer be recorded there;
• space destroyed: the page becomes a read-only trace of your consents as they stood when the company left. A receipt stored in this browser can still be verified. You can remove that trace from your dashboard; this withdraws no consent and sends no request to the company.

When a company's Agreely service is merely unavailable, its new consent requests cannot be accepted, but withdrawal and erasure stay open.