Short version: this website collects nothing about you. No account, no cookies, no analytics, no advertising, no fingerprinting, and nothing loaded from another company’s server. The long version below exists because “we respect your privacy” is what every site says, and the only useful version of that sentence is a specific one.

You do not have to believe any of it. Check it. Open your browser’s network panel and reload any page here: every request goes to this domain and no other. The home page also measures it live, in your own browser, and prints the result.

What this site collects

Nothing that identifies you, and nothing we choose to keep. There is no sign-up, no form, no comment box and no API that accepts input, so there is no mechanism here to gather personal data even if we wanted one.

No cookies. None are set, for any purpose, including “essential” ones. That is why you have never seen a consent banner on this site: there is nothing to consent to.
No analytics. No page-view counting, no session recording, no heatmaps, no A/B testing. We do not know how many people read this sentence.
No third-party requests. Fonts, images and scripts are served from this domain. Nothing is fetched from a CDN, a font host or an ad network, so no other company learns your IP address from visiting.
No fingerprinting and no cross-site tracking of any kind.

What the server unavoidably sees

Any web server sees a request in order to answer it. Ours is hosted by Vercel, which keeps standard request logs for a short period for security and reliability: an IP address, a timestamp, the page requested, and the browser’s user-agent string. We do not read these routinely, do not export them, do not combine them with anything else, and cannot use them to build a profile of you.

Cloudflare provides authoritative DNS for the domain and nothing else. Its proxy is deliberately switched off, so no visitor traffic passes through it and it sets no cookie.

How long anything is kept

We keep nothing ourselves, because we collect nothing. Host request logs are retained briefly by Vercel under their own policy and then discarded. Email you send us is kept only as long as it takes to answer, and then deleted.

Where data goes

Nothing is sold, rented, shared or transferred to anyone, for any purpose, ever. There is no advertising relationship, no data broker, no analytics vendor and no affiliate. If that ever changed, this page would change first and the date at the top would tell you.

Our host operates internationally, so a request may be served from outside the EU. Vercel and Cloudflare provide their own safeguards for international transfers as data processors.

Wyrm’s tools

The tools do not report to us, and there is nothing here for them to report to. They run entirely on your own machine, keep whatever they need locally, and make no network calls of their own. There is no account attached to a tool and no identifier attached to an install.

If you email us

Then we have your email address and whatever you wrote, for as long as it takes to reply. It is not added to a list, because there is no list. Mail is hosted with Tuta, in Germany.

Search engines

Google Search Console and Bing Webmaster Tools are used to see how the site appears in search results. Neither puts any code on this site; they report the search engine’s own aggregate data about queries and rankings, not anything about you as a visitor here.

Security

The site is served over HTTPS only, with HSTS. It runs a strict Content Security Policy, has no API routes and accepts no user input, which removes most of the ways a site like this is attacked. Found something? See security.txt.

Legal basis, and automated decisions

Under the GDPR, the limited processing described above rests on legitimate interest: serving pages you asked for and keeping the site up. No consent banner appears because no processing here requires consent. There is no profiling and no automated decision-making of any kind.

Your rights

Under the GDPR you may request access to, correction of, or deletion of personal data we hold, object to processing, or ask for portability. In practice we hold nothing about you unless you emailed us, in which case ask and it is deleted. You also have the right to complain to your national data protection authority; in Italy that is the Garante per la protezione dei dati personali.

Children

Nothing here is directed at children, and since no personal data is collected from anyone, none is collected from them either.

Who we are, and changes

Wyrm is an independent project founded in Italy, and is the data controller for this site. Reach us at iamwyrm@tutamail.com. If this policy changes, the date at the top changes with it. See also the cookie policy and the terms.