Privacy

Your manifest never leaves your browser. It's checked on your device, and isn't sent anywhere, stored, or put in the URL.

What's collected

Nothing through the page: no accounts, cookies, analytics or tracking scripts. Like any website, the server that hosts it keeps standard access logs of page requests, which include your IP address, the page you asked for and your browser. They're used to count visits, and can't contain your manifest, because it's never sent. Raw access logs are deleted after 14 days, and visit counts kept longer have IP addresses shortened.

Who runs this site

This site is run by markontechcom on X and markonisic on GitHub. For privacy questions, email [email protected].

How you can confirm it

Every page is served with a Content Security Policy that includes connect-src 'none', which tells your browser to block fetch, XHR, WebSocket and beacon requests from scripts, and form-action 'none', which blocks form submissions. Your browser enforces this, so you don't have to take our word for it:

1. Open your browser's developer tools, and go to the Network tab.
2. Paste a manifest, and choose Check manifest.
3. No new requests appear.