Privacy Manifesto
Privacy isn't a feature. It's the whole point.
This page is both a policy and a promise. It describes exactly what this site does and does not do, and the principles behind every engagement we run.
"
If protecting your privacy costs us convenience, we choose your privacy. Every time. No exceptions.— NULLSEC Founding Charter, Article I
What this site does
Radically minimal, on purpose.
Analytics & tracking scripts
Third-party trackers, ad pixels, fingerprinting
Not present
Cookies
Session or persistent cookies
None set
Form submissions
Contact form data
Encrypted in transit, purged on reply
Server logs
IP / request logging
Disabled
Third-party embeds
External fonts, scripts, widgets
Minimized
Our principles
Five rules we don't break.
/ 01
Data minimization
If we don't strictly need it to do the job, we don't collect it. Ever.
/ 02
Encryption by default
Everything that can be encrypted, is — at rest and in transit, no toggle required.
/ 03
No silent retention
Engagement data is purged on sign-off. We don't quietly keep copies "just in case."
/ 04
Transparency of method
Every tool and technique we use is documented and disclosed to the client — nothing operates as a black box.
/ 05
Consent, not assumption
We test what we're authorized to test. Nothing more, and never without written scope.
/ 06
Right to disappear
You can request full deletion of anything we hold about you or your engagement, at any time.