Privacy

Privacy Policy

This policy describes what we collect when you use this site, what we do with it, and the rights you have over it. It applies to this website and to the forms on it.

Last updated 2026-08-27

Interpretation and definitions

Words with an initial capital have the meaning set out here. “We”, “us” and “our” mean the operators of this site. “Service” means this website and the forms on it. “You” means the person using the Service, or the company or other body that person acts for.

“Personal Data” means information relating to an identified or identifiable person. “Usage Data” means data collected automatically by the operation of the Service or its infrastructure. “Service Provider” means a third party that processes data on our behalf.

The personal data we collect

When you submit one of the forms on this site we collect what you enter. Depending on the form, that is your email address, and may also include your name, the company you work for, a domain or website you have asked us to look at, and the content of any message you write.

If you tick the box offering further communications, we record that you did, so that we can honour it and so that we can show why you were written to.

You choose what goes in these fields. Please do not enter another person’s personal data, credentials, or anything confidential you are not entitled to share.

Usage data

Usage Data is collected automatically. It includes your device’s IP address, the pages you requested, the date and time of each request, the response our server returned, the country the request came from, and your browser’s user-agent string.

Where a request reaches one of our forms, your IP address is not retained in readable form: it is combined with a secret value and hashed, and only that hash is stored. We use it to enforce a rate limit so a single machine cannot flood the form, and for nothing else.

Usage Data is held in our hosting provider’s request logs, retained for a short period and then discarded automatically.

Cookies and similar technologies

We use cookies and similar technologies, and service providers who help us understand who uses the site and how, to measure and improve the Service and to follow up with organisations that show an interest in it. We do not serve advertising on this site and nothing here builds an advertising profile of you.

Google Analytics records, for each page you open: the page, the time you spend on it, links you follow to other sites, the referring site, your country, and your browser and device type. Google signals and ad personalisation are off, and your IP address is not retained by Google. Google processes this data on our behalf under its data processing terms; see https://policies.google.com/technologies/partner-sites for how Google handles it. Blocking cookies in your browser stops none of the site from working.

Pages are served with a no-referrer policy, so a site you reach by following a link from here is not told which page you came from.

How we use your personal data

To reply to you. Everything you submit exists so that we can answer the thing you asked about.

To provide, maintain and protect the Service, including rate limiting, preventing abuse of the forms, and diagnosing faults.

To send you further communications where you have asked for them. You can tell us to stop at any time and we will.

To meet a legal obligation, or to establish, exercise or defend a legal claim.

The basis on which we process it

Where the law requires a legal basis for processing, ours are: your consent, which you give by submitting a form and may withdraw; our legitimate interest in answering enquiries, keeping the Service available and protecting it from abuse; and compliance with legal obligations that apply to us.

Who we share it with

We do not sell personal data, and we do not share it with advertisers, data brokers or list vendors.

We use Service Providers who process data on our behalf under contract: our hosting and edge provider, which serves this site and holds the database of form submissions, and a font provider, which receives your IP address when your browser fetches the typefaces a page uses. No other third party is contacted by these pages.

We may disclose personal data where the law requires it, or where disclosure is necessary to protect our rights or the safety of others. If we are ever party to a merger, acquisition or sale of assets, personal data may transfer with the business, and we will say so before it does.

Where your data is processed

Our providers operate globally, and your data may be processed on servers outside the country you live in, including in jurisdictions whose data protection law differs from your own.

We take reasonable steps to see that it is handled securely and in line with this policy wherever it is processed, and we choose providers who offer recognised transfer safeguards.

How long we keep it

Form submissions are kept for as long as the correspondence they belong to needs them, and after that for as long as we have a legitimate or legal reason to keep them.

Usage Data is kept for the short retention period our hosting provider applies, after which it is discarded.

You can ask us to delete your data sooner, and we will, unless we are required to keep it.

Security

The Service is served over HTTPS, submissions are stored in a database that is not publicly reachable, and IP addresses are stored only as salted hashes.

No method of transmission or storage is perfectly secure and we cannot guarantee absolute security. We do commit to telling affected people promptly about a breach that is likely to put them at risk.

Your rights

Depending on where you live, you may have the right to ask us for a copy of the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent you gave earlier.

Write to the contact form on this site and we will act on it. There is no account to close and no form to fill in — a message is enough. You also have the right to complain to your local data protection authority.

Children

The Service is aimed at people responsible for websites and software and is not directed at children under 16. We do not knowingly collect personal data from them. If you believe a child has given us data, tell us and we will delete it.

Links to other sites

This site links to sites we do not control, including the sites and documentation it discusses. We are not responsible for their content or their privacy practices, and we encourage you to read the policy of any site you visit.

Changes to this policy

We may update this policy. When we do, the date at the top changes and the updated version takes effect when it is published. Where a change materially affects your rights we will make it prominent rather than quiet.

Contact us

Questions about this policy, or about the data we hold on you, go to the contact form on this site.

Contact us

Ask us to run on your domain.

We use the address to write back about your domain, and for nothing else.
Secure your environment

Tell us what troubles you.

Your agents read whatever is in reach - your docs, your llms.txt, a ticket, an email, a package name in an install line - and act on it unreviewed.