Privacy Policy

Effective date: August 15, 2026

Plain-English summary: we don't want your data. We set no cookies, run no analytics, embed no trackers, and sell nothing to anyone. Our web server keeps standard access logs and that's the whole story. For a site with this name, we are suspiciously respectful of your privacy.

1. Who we are

untrusted.site is a satirical security-awareness project. It exists to remind people that trust on the internet should be earned, not assumed — including trust in this site, which is why this policy is written to be actually readable.

2. What we collect

Our web server automatically records standard access logs when you visit: your IP address, the date and time of the request, the page requested, the referring page (if your browser sends one), and your browser's user-agent string. That is the complete list. We collect this because every web server on earth does; it is used only for operating, securing, and debugging the site.

3. What we do NOT collect

• No cookies — first-party, third-party, or otherwise. Check your browser's storage inspector; it's empty.
• No analytics or telemetry of any kind.
• No advertising or ad networks.
• No forms, accounts, or submissions — there is nothing here to type your information into, which is frankly the safest design we could think of.

4. Sharing and selling

We do not sell, rent, trade, or share your information with anyone, because (a) we barely have any, and (b) that would be exactly the kind of thing an untrusted site would do. We would disclose log data only if legally compelled to by a valid legal process.

5. Data retention

Server access logs are retained for a short operational window and then rotated out of existence. They are not archived, mined, or lovingly preserved.

6. External links

This site links to third-party resources we consider genuinely useful (e.g., CISA, the FTC, Have I Been Pwned, the EFF). Once you leave untrusted.site, their privacy policies apply, not ours. We chose them carefully, but per the entire theme of this website: verify for yourself.

7. Your rights

Depending on where you live (GDPR, CCPA/CPRA, and friends), you may have rights to access, correct, or delete personal data. We honor these requests, though in practice the only data we could possibly hold about you is an IP address in a rotating server log. Contact us via the address in our security.txt and we will respond like adults.

8. Children's privacy

This site is not directed at children under 13 and collects no personal information from anyone, children included. If a child has learned to stop clicking suspicious links because of this site, we consider that a win for everybody.

9. Changes to this policy

If this policy changes, the new version will be posted here with an updated effective date. We will not pretend you re-agreed to it by continuing to breathe.