Trust and security
What we practise ourselves.
Last reviewed: 2026-10-18
This website
- Static site on Cloudflare Pages, HTTPS only, with HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy headers. You can check them with our own mini-scan.
- No advertising or tracking cookies. Cookieless analytics only, if enabled.
- Free scans: we keep only the domain, time, country and any email you give, for up to 12 months.
Client data
- We ask for the minimum: the domain and a contact.
- Reports are kept for the engagement and as accounting rules require, then deleted on request where the law allows.
Sub-processors
| Provider | Purpose |
|---|---|
| Cloudflare | Hosting, form storage, DNS lookups, analytics |
| FormSubmit | Forwards form submissions to our inbox |
| Google Workspace |
Report a vulnerability
See security.txt or use the contact form. Please don't test beyond what's needed to show the issue.
Find out what your website reveals
Run the free passive mini-scan in under a minute, or ask for a quote for the full report.