Cookie Policy

Last updated: 10 July 2026

1. The short version

This site uses no cookies at all and no cross site tracking. We do run our own privacy-first analytics to understand how the site is used and improve it, but only if you allow it, and it is anonymous and cookieless. We think a security company should collect as little as possible, so we do.

2. What we store on your device

We use your browser's local storage (not cookies) for a few small things. None of these ever leave your device on their own, and none contain personal information.

• Theme preference (phantom-theme). If you switch between the dark and light theme, we save that choice so the site remembers how you like it.
• Analytics choice (phantom-analytics-consent). Whether you allowed or declined analytics, so we do not ask again on every visit.
• Anonymous analytics id (phantom-analytics-sid). A random value with no personal data, used only to group one visit's activity together. It is created only if you allow analytics, and is removed if you decline.

That is the complete list. We set no cookies of our own.

3. Analytics, only if you allow it

The first time you visit, we ask whether you are happy for us to measure how the site is used. Nothing is collected until you choose Allow analytics. If your browser sends a Do Not Track or Global Privacy Control signal, we treat that as a decline automatically and never ask.

If you allow it, we record, in our own database (Supabase):

• the page you are on, the positions of clicks (as fractions of the page, so they work on any screen), how far you scroll, your viewport width, and the website you arrived from (its address only).

We do not record your name, email, anything you type, your IP address, or any cross site or advertising data. You can change your mind at any time (see "Managing your choices" below).

4. Third party requests

Two third party services are involved in serving this site:

• Font delivery. The site loads its typefaces from Google Fonts. Your browser makes a request to Google's servers, which involves your IP address. Google states it does not use these requests for advertising profiles.
• Form storage. When you submit the contact form, your browser sends the form contents to our database provider (Supabase) over an encrypted connection. This happens only when you press send, and is covered by our privacy policy.

5. Managing your choices

You are in control of analytics at all times:

• Decline when first asked, and nothing is collected.
• Turn on Do Not Track or Global Privacy Control in your browser, and we treat it as a decline automatically.
• Withdraw consent by clearing this site's data in your browser settings. That removes every stored value above, including the analytics choice and id, and the site will ask again on your next visit.

The site works fully whichever you choose. The theme preference behaves the same way: clear it and the site simply follows your operating system's theme next time.

6. If this changes

If we change what we collect or how, we will update this page first, explain exactly what is collected and why, and ask for consent where the law requires it.