What this site knows about you.
Very little. This page says what a visit leaves behind, where it goes and how to check it. It describes what the code does today, and a test fails if the code and this page ever disagree.
A plain statement of facts, not a legal privacy notice. No lawyer has reviewed it.
The short version.
The sections below give the detail, and the last one says how to see it for yourself.
- Cookies
- None. The site sets no cookie and its code never reads one.
- Accounts
- None. There is nothing to sign up for and no form that sends your details anywhere. The site never asks you to connect a wallet.
- Analytics
- None. No tracking script, no pixel, no advertising network, no fingerprinting.
- Other companies
- Google Fonts only. Every page asks Google for its typefaces. The browser is told to refuse every other outside host.
- Your browser
- A few small notes stay on your device and are never sent to the site. They only remember a choice for next time.
- The server
- Writes nothing down. It answers a request and forgets it: no visit log, no file, no database. Its only log lines are its start-up message and its own errors.
- The host
- Sees every request, as any web host does. That part is outside this program.
Fonts come from Google.
Every page loads its typefaces from Google. Serving them from this site instead would remove the request. That is planned and not done.
| Host | What it serves | What it learns |
|---|---|---|
| fonts.googleapis.com | The stylesheet that names the typefaces | Your address, your browser's name and version, and this site's address (never the page you are on). |
| fonts.gstatic.com | The font files |
Each page's Content-Security-Policy tells the browser to refuse requests to any other host.
A few notes, on your device.
These are the only things the site asks your browser to keep. They are never sent to the server, and the pages work without them if you block site data: you just start fresh each visit.
| Key | Where | What it holds |
|---|---|---|
| ck.recent | Cockpit | The ids of the last five targets you opened, for the quick-open list. |
| rts1 | Treasury Standard | Your answers on the self-scoring page, so a reload keeps them. |
| raider.deck.theme | Pitch deck | Whether you chose the paper or the dark theme. |
| raider.deck.notes | Pitch deck | Whether you opened the speaker notes. |
On the Treasury Standard page your answers also travel in the page address, after the #, so a link can carry them. A browser never sends the part after the # to a server. Clear all of it from your browser's site settings whenever you like.
Answered, then forgotten.
Each request is answered and dropped. This is what arrives, what the program does with it and what stays outside its reach.
- What arrives
- Each request carries your address, the page it asks for and what a browser always sends, such as its name and its language. Behind a proxy, the address is the one the proxy reports.
- What the program does
- It answers. To slow abuse it counts requests per address in its own memory. That count is never written anywhere and is gone when the server restarts. It keeps no visit log.
- What it logs
- Its start-up message and its own errors. An error line can name the page that failed. It never names a visitor's address.
- The tools
- The simulator and the other tools send only what you set on screen (a target, a seed, a few parameters) and get the result back. Nothing is stored. Images you drop on the stamp tool and the cards you make are drawn in your browser and never uploaded.
- The host
- Whoever hosts the site, and any network in front of it, sees and may log each request: your address, the page, the time, your browser's name. That is outside this program, and the host's own policy applies. The hosting company is not named on this page yet.
Links leave the site.
Some pages link to other sites. Nothing is requested from them until you click. Your browser then tells them this site's address and nothing more specific, and their own policies apply.
- explorer.solana.comThe Solana explorer, for the transaction ids of real transactions on the ledger page. Demo transactions carry a SIM- id and have no link.
- The social accounts, once they are set up. The footer shows each one as not set up until then.
Look for yourself.
Three ways, from the quickest to the most thorough.
- Open your browser's developer tools, choose the Network tab and reload any page. You see this site's own files and the two Google hosts above, nothing else.
- In the Application tab (Storage in some browsers), Cookies is empty and Local Storage holds only the keys above, and only for the pages you used.
- In the code, tests/privacy.test.mjs fails if a page starts setting a cookie, reaches a host this page does not name, keeps a note it does not list, or the server starts logging visitors.