Privacy

This site (witnessory.org)

• It is a static page hosted by GitHub Pages. GitHub receives your address and browser details, as any web host does, under GitHub's privacy statement. Witnessory receives nothing from your visit.
• No cookies, no analytics, no tracking of any kind by Witnessory.

The site checker (check.witnessory.org)

• Requests pass through Cloudflare, which receives your address as any web host does, under Cloudflare's privacy policy.
• The checker uses your address only in memory, to limit how many new checks one address can start in an hour. It is never written down, logged or kept; it is forgotten about an hour after your last check, or when the service restarts.
• To check a site, the checker looks up its name with Cloudflare's DNS resolver (cloudflare-dns.com) and connects to it through Cloudflare's network (WARP). So the name you ask about passes through Cloudflare, under the same privacy policy, and the site sees a Cloudflare address, not yours and not our server's.
• The site you ask about and its result are kept in memory for 10 minutes, so the next person asking gets the same signed result. Nothing links them to you.
• We count requests by kind (for example "checked", "too many", "invalid name"), with no address or other detail, to see where the service fails people.

Probes (if you host one)

A probe's results, its public keys, and the network (number and name) and country it connects from are kept and published: on the probe's own page, on the probe map and with its results. Its address is never stored or published. Details: hosting a probe.

If you ask to be told when you can buy

The services page has a one-field form. We keep the address you give and the product you chose, nothing else, until we have told you that product is available; then we delete it. The form sends it to our coordinator (coordinator.witnessory.org, on Cloudflare).

Counts we keep about our own services

To find and fix failures we look at Cloudflare's aggregate counts of requests to our services by site, path and status code (for example "12 requests to /api/check answered 503 last hour"). They contain no addresses and nothing about any visitor.

Contact

security@witnessory.org for anything about privacy or security.