data and privacy

What the system knows about you

This page is the engineering account of how data is handled. It sits alongside the Privacy Policy, which is the legal instrument; where the two describe the same thing, the policy governs.

01

Profile fields are sealed, not merely stored

Personal profile values are held in sealed form rather than as readable text. A component that needs to act on a value opens it deliberately; nothing reads it by accident, and a stored record does not disclose its contents to anything that merely has the record.

02

This website cannot talk to a server

The public site you are reading declares a Content Security Policy with connect-src set to none. That is not a preference — it is enforced by your browser. No script on this site can open a network connection, so the pages you read here cannot be reported anywhere, and the site cannot be turned into a tracker even by someone who modifies it.

The site loads no third-party scripts, no third-party stylesheets, and no third-party fonts. There is no analytics bundle, because there is no mechanism by which one could send anything.

03

Buying a file does not require an account

A direct purchase is handled by the payment provider, and delivery is a one-use link sent to the purchase address, authorising exactly the file that was bought. No application account is required to buy or to receive the file. An account can be linked afterwards if you want one.