Security & privacy
What this site does, and what it never does.
The plain-language companion to /.well-known/security.txt.
CookiesNone.
TrackingNo analytics, no pixels, no fingerprinting scripts.
ScriptsFirst-party only, plus a privacy-respecting bot check on the two forms.
Browser policyA strict content security policy. Nothing loads unless this site allows it.
TransportEncrypted connections only.
Your inputThe Signal Room, the Morse tools and the Lieutenant run entirely in your browser. What you type there stays on your device.
The formsMessages reach Aaron directly and aren't stored. The Wall shows only your name, your place and your line, after a human check. Never your IP address. Nothing you write is fed to a model.
Email & phoneUsed only to reply. Never published, sold or shared.
Found something?
If you find a weakness in this site, write to security@vaultrec.com with what you saw, where, and how to reproduce it. Good-faith reports are read personally and answered, usually within three days. Please don't test with other people's real data.
Scope: vaultrec.com and the subdomains that serve this site. Anything that asks you to sign in is out of scope.
Back to the door