Privacy

What happens to your data

Last updated 29 September 2026.

Configurations you analyse

Everything you paste or drop into the analyzer is processed by JavaScript running in your own browser. It is not sent to us or to anyone else, and it is not stored: close or reload the tab and it is gone.

This is enforced, not just promised. The site is served with a Content-Security-Policy header that includes connect-src 'none' and form-action 'none', which stop the page from making network requests or submitting forms. Scripts may only come from this site itself (script-src 'self'). You can read the header in your browser's developer tools, on the Network tab.

Cookies, analytics and tracking

None. The site sets no cookies, runs no analytics, and loads nothing from third parties. The fonts are served from this site rather than from a font service.

Server logs

The site runs on a virtual private server rented from HostUp, with nginx as its web server. Like any web server, it records standard access logs: the address that made each request, the time, the page or file requested and the browser's user-agent string. These logs contain no configuration data, because configurations are never sent. They are kept for 14 days and then deleted, and are used only to operate and secure the site, never for tracking or marketing.

Questions

Write to info@theovan.org.