Privacy

No cookies, no accounts, and no attempt to work out who you are.

What this site stores

Nothing on your device. No cookies are set, no identifiers are written to local storage and no accounts exist. The site is a set of static files and a page of JavaScript that runs in your browser.

Analytics

This site counts visits with Cloudflare Web Analytics, so we can tell which pages people actually read. Each view records the page address, the referring link, the country it came from, your browser and device type, and how quickly the page loaded.

It sets no cookies. It builds no fingerprint, follows you to no other site, and stores nothing that identifies you or your device, so there is no profile here to ask us for and no consent banner to click. Measurements are aggregated and kept for six months.

If you would rather not be counted, any blocker that stops static.cloudflareinsights.com will do it, and the site works exactly the same without it.

The demo

The demo runs entirely in your browser. The requests, verdicts and audit records it shows are fixtures shipped with the page; nothing you do there is sent anywhere, and nothing is kept once you close the tab.

Fonts

The two typefaces are served from this site, not from Google, so no third party sees your request for them. The analytics beacon above is the only thing loaded from anywhere else.

The software

hardened-mcp itself, when you run it, writes its audit log to a path your own policy file names, on your own machine. It is never sent here.

Getting in touch

Questions about this page go to @aoutix on X.