Privacy, by design.

This independent website collects no account name, email address or physical address. Its contact form asks only for a topic and message. Please avoid including personal information.

A short-lived, HttpOnly session cookie enables preview quotas and protects form actions. The server stores a keyed pseudonymous network identifier, counters and expiry times for abuse prevention. It does not trust caller-supplied forwarding headers.

Anonymous messages expire after 30 days and are removed during the next visit or inbox review, in a bounded separate inbox. Common email, phone and credential-like strings are redacted before storage, although automated redaction cannot identify every kind of personal information.

No advertising trackers, third-party analytics, external fonts or production player records are used here. The website has its own runtime and storage; it does not access operator wallets or the provider’s administrative database.