Security
How it’s kept safe. In plain English, and you can check it yourself.
Six layers of protection, explained without the jargon. Below, your own browser checks this page’s safety rules, live.
- Only loads what it’s allowed tocontent-security-policy…
Technical value
- Always uses a secure connectionstrict-transport-security…
Technical value
- Can’t be hidden inside another sitex-frame-options…
Technical value
- Opens files only as what they claim to bex-content-type-options…
Technical value
- Tells other sites as little as possiblereferrer-policy…
Technical value
01 / Defence in depth
Six layers, from the outside in.
Not one wall but six separate ones. Anyone trying to get in would have to beat each of them in turn, while being watched.
The front door
Every visit comes in through a protected front door first. It turns away unencrypted connections and only accepts up-to-date, secure ones. Behind it, the link to our servers is encrypted again.
This website
The site tells your browser exactly what it may load, and nothing else. There is no hidden code tucked into the pages, it cannot be shown inside someone else’s site, and it never says what software it runs on.
Sealed compartments
Each app runs in its own sealed compartment and can only talk to what it needs. None of them faces the internet directly. There is one guarded way in, and anything that is not expected is blocked.
Signing in
One sign-in covers every app, so there are no separate passwords to leak. You only get an account if you are invited, and you sign in with a passkey: your fingerprint, your face or your phone’s PIN. The key never leaves your device.
The private VPN
The apps only open through a private, encrypted connection, and every device has its own key for it. The keys are refreshed every couple of minutes. To anyone else on the internet, there is simply nothing there.
Watched
A separate machine checks every service around the clock and publishes the results, good or bad, here and on the status page. If something goes wrong, we hear about it first.
02 / Your privacy
Nobody is watching you.
Straight answers about tracking, cookies and what gets recorded.
- No adverts, no tracking
- There are no advertising tags, no social media buttons and nothing that follows you around the web. Nobody is building a profile of you.
- Adverts blocked on the VPN
- When your device is on the VPN, adverts, trackers and known bad websites are blocked before they load. That covers every app on the device, not just the browser. Off the VPN, it is back to normal.
- Cookies
- This website sets none. Signing in uses only the cookie needed to keep you signed in, and it comes from the itzgee.com sign-in service.
- What is logged
- The usual technical records: which pages were asked for, whether services are healthy, and sign-ins. They are kept to protect the service and fix problems. Never to profile anyone.
- You only get emails about joining, recovering your account and security. No marketing, ever.
- Stolen passwords
- There are no passwords to steal. A leaked list of passwords has nothing here to match.
- Harmful code slipped into a page
- The site only runs its own code, from its own address. Your browser blocks anything else.
- Being tricked into clicking
- Nobody can put this site inside theirs to trick you into clicking something you did not mean to.
- Eavesdropping
- Unencrypted connections are refused, and every part of the journey is encrypted.
- Strangers finding the apps
- The apps do not answer on the open internet. Without a VPN key, there is no door to try.
04 / Check it yourself
Don’t take our word for it.
Three independent websites that test other websites’ security. Each link runs a fresh test, on their site, right now.
Found a problem?
Found a security problem? Tell us privately at [email protected] and it will be looked at quickly. Honest research is welcome.