Trust

Privacy notice

This is a plain-language notice for the first version of Am I Secure. It is not a substitute for legal counsel.

What we do not collect

• No accounts, logins, or profiles.
• No passwords, passkeys, or email addresses.
• No durable server copy of your Yes / No / Not sure answers. Those stay in this browser session.
• No behavioral advertising pixels or session replay of answers.

What this site may see

• Ordinary web logs needed to operate the host, including a public network address for a short time. We do not bind that address to your answers.
• Anonymous product-event names (checkup started, completed, receipt viewed, outbound-link category). In this version the origin accepts those names and does not store them. Payloads that include answers are rejected.
• First-party page views and Core Web Vitals through Vercel Web Analytics and Speed Insights. Those scripts stay on this origin in production. They do not include your checkup answers.
• If you open Have I Been Pwned or a password-manager site, that destination has its own privacy policy.

Cookies

The checkup does not need a non-essential cookie to work. Answers use session storage in your browser. Vercel Web Analytics and Speed Insights are cookieless in this setup.