Privacy
No analytics scripts, no trackers, no fonts or assets loaded from anyone else's servers. What follows is the full, scoped truth — including the one thing that happens at the hosting layer, which we name rather than hide.
What this site does not do
- No analytics, no tag managers, no advertising or social pixels.
- No cookies and no browser storage. Nothing is written to your device by this site.
- No reading of your hardware, GPU, locale, timezone, or device memory. The site takes no such readout.
- No server-side form processing and no upload endpoint. The partners intake composes a message
in your own mail client — the page builds a
mailto:link from what you type and opens it; nothing you enter is transmitted or stored by this site.
The only computation in the page
The homepage fetches its own HTML, same-origin, to compute and display a SHA-256 of itself so you can reproduce it with curl. That request goes to identitytrusts.org and nowhere else, and carries no information about you. The consent and upload pages run Ed25519 entirely in your browser; keys and tokens never leave your device.
Hosting layer — named, not hidden
The site is served by Cloudflare Pages. Cloudflare's dashboard shows us aggregate, non-identifying request counts (totals and rough geography) the way any web host sees traffic. We do not place that data, cannot tie it to you, and add nothing on top of it. It is a hosting-layer fact, not site-level tracking — named here rather than hidden.
If you email [email protected], that message reaches a mailbox at
Proton. Standard mail headers apply; we keep
your address only to reply. We do not rent, sell, or share it.
Sub-processors
- Cloudflare — static hosting and DNS (aggregate request metrics only).
- Proton — inbound/outbound mail for the address above.
That is the complete list. A planned migration to self-hosted infrastructure will narrow even this; this page will be updated when it does.
Questions: [email protected]