Privacy

The audit tool

Built-in scenarios are generated on the server and stored nowhere. A file you upload as a sample is parsed in memory, audited, returned to your browser, and discarded. No evidence chain is written for a sample run. Per-address request counts are held in memory only for rate limiting and are not persisted.

The contact form

What you type is stored so that a reply can be sent, and used for nothing else.

Engagements

Data supplied under an engagement is processed under that engagement's terms, stored in a directory that only that engagement's key can read, and deleted on request.

Cookies and analytics

This site loads one analytics tool, PostHog, which runs in your browser, sets a cookie, and records page views, clicks and session recordings. Nothing you upload to the audit tool is sent to it. Apart from PostHog and the font stylesheet, pages make no third-party request. Fonts are loaded from Google Fonts, which receives your address when the font file is requested.