← Return to the runbook

Privacy and no-logs design

The public site has no analytics, advertising, account system, third-party fonts, tracking pixels, or browser fingerprinting code. Interactive calculations run locally. The optional Worker API validates envelopes and computes hashes in memory without a database or application logging.

Cloudflare boundary

The project disables Workers observability in its Wrangler configuration and emits no custom logs. A deploying account owner must still review Cloudflare account, zone, security, and network telemetry settings because infrastructure-level request processing is outside this source package.

Never publish private case data

Use synthetic or de-identified material until consent, authority, access control, retention, deletion, and governance are formally implemented. Private and restricted data fail closed.