Writing · privacy
2 posts filed under privacy, newest first.
A no-log policy is only meaningful when the exceptions are named. What this service records, what it does not, how each part is tested — and the four things a tunnel cannot protect you from.
Assign a visitor to a variant from a rotating HMAC key, count the outcome server-side, and hold no persistent identifier — plus what that makes unanswerable.