This marketing site (what you are reading now)

• No analytics script, tag manager, or third-party tracker is loaded. There is nothing in this codebase that phones home when you load this page.
• No advertising cookies, no fingerprinting, no session replay.
• The one thing stored in your browser is a localStorage flag recording your cookie preference choice itself — not a cookie, not sent to a server, and not read by anything except the banner that wrote it.
• Links marked as opening GitHub, npm, or Vercel leave this site and are covered by those services' own privacy policies, not this one.

The free API endpoints (Validator tier)

• POST /v1/spec/validate, the separation calculator, manifest diff, advisory check, Declaration check, bundle re-verification, and attestation verification are all designed to run without an account and record nothing server-side about who called them.
• This service is not deployed to a public host yet — see the pricing section on the homepage for exactly what that means today.

The offline enrolment kit

Runs entirely on your machine, writes only to disk you control, and arms a guard that refuses every outbound network connection — including DNS lookups — for the duration of the run. This is not a policy; it is checkable in the kit's own docs.

The paid Register / Cell tiers

Not deployed publicly yet. When they are, the account and billing model (what Stripe stores, what this service stores) will be documented here before the first paying customer signs up — not after.

Contact

Questions about this page: open an issue. Security issues: see the security policy.