Trust and security
What we practise ourselves.
Last reviewed: 18 October 2026
This website
- Static site on Cloudflare Pages, HTTPS only, with HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy headers. You can check them with our own mini-scan.
- No advertising or tracking cookies. Cookieless analytics only, if enabled.
- Free scans: we keep only the domain, time, country and any email you give, for up to 12 months.
Client data
- We ask for the minimum: the domain and a contact.
- Reports are kept for the engagement and as accounting rules require, then deleted on request where the law allows.
Sub-processors
| Provider | Purpose |
|---|---|
| Cloudflare | Hosting, form storage, DNS lookups, analytics |
| FormSubmit | Forwards form submissions to our inbox |
| Google Workspace |
Report a vulnerability
See security.txt or use the contact form. Please don't test beyond what's needed to show the issue.
Find out what your website reveals
Run the free passive mini-scan in under a minute, or ask for a quote for the full report.
Need help with an issue?
Quick contact Quick fixes Email support
Send the domain and finding reference. Please do not email passwords, customer records or exposed secrets. We reply within one business day; this is not a 24-hour incident-response hotline.