Security

Everything on this page can be checked from the site itself.

Almost nothing runs here
Every page is built in advance and served as a finished file. There is no user account or session. Contact opens your email app.
Nothing comes from anywhere else
Every typeface, style, image and script is served by this site. No third-party script is loaded, there is no analytics or tracker, and nothing is embedded from another domain.
What the browser is told
Browsers are instructed to load nothing this site did not serve, to refuse any attempt to display these pages inside another site, and to deny access to camera, microphone and location.
The connection
Traffic is encrypted, and browsers are asked to keep it that way for a year. Files are treated only as the type they are declared to be, and the full address of the page you came from is not passed on to other sites.
What is published
Everything the site depends on is pinned to an exact version, and the published files are checked against that build before release.
Contact by email
The contact link opens your email app. You review and send the message there; the website does not submit it for you.

Reporting a problem

If you find a security issue, write to the contact address on this site and describe it. You will get a reply.

Back to the homepage