This server keeps an append-only list of digests and the moment each was first seen. Lodge one now, and at any point in the future anybody can confirm that the data it was computed from already existed by then.
It holds 2 digests and no content whatsoever. There is no field for a file, no code path that would accept one, and nothing here worth stealing. That is the design, not a stage it will grow out of.
Lodging a digest here requires an account or a service key. Checking one does not, and never will.
POST /objects/action_notarize
{"digest": "<hex>", "algorithm": "sha256", "label": "optional note"}
Submitting the same digest twice returns the original record and its original time. A later submission cannot make something earlier, so nothing here can walk a timestamp forward.
This notary's clock being right and its operator being honest. Trusting one notary is trusting one party -- which is a large improvement on trusting yourself, and is not the end of the argument. Anchor a digest with several independent notaries and forging it means compromising all of them.