twoodo
/

Home/Privacy

Privacy, in specifics

Most privacy policies hedge, because most sites do not know what they collect. This one can be exact: the site is a set of static files with no server, no analytics and no cookies. Below is what that means, and a panel showing what is on your device right now.

Last reviewed September 2026

The short version

  • AccountsNoneThere is nothing to sign up for.
  • AnalyticsNoneNo Google Analytics, no Plausible, no pixel, no heatmap, nothing counting visits.
  • CookiesNoneThe site sets no cookies at all.
  • AdvertisingNoneNo ad network is loaded and no advertising identifier is set.
  • What you typeNever leaves the pageConversions, passwords tested, text pasted into the HTML tester — all of it is processed in your browser.
  • Microphone and cameraNever recorded or sentYour browser hands the stream straight to the page. Pressing stop releases the device.
  • Local storageA short list, shown belowPreferences and game saves, kept on your device and readable by you.
  • Third partiesWeb fonts onlyFonts are requested from Google Fonts. That is the one request that leaves this site, and the about page lists it.

What is on your device right now

Read live from your browser. If a row is not listed, the site has not stored it. You can remove any of it here, and nothing breaks except the preference itself.

Local storage for this site live from your browser

    What the site does not do

    There is no analytics script, so no count of visits, no session recording and no record of which tools are used. There is no ad network, no tracking pixel and no fingerprinting. No cookies are set by this site at all.

    There is no account system, no newsletter and no email collection. The contact page does not submit anywhere — it builds a message and hands it to your own email client, so you can see exactly what goes and choose whether to send it.

    Tools that ask permission

    Several tools need access to hardware. In every case your browser is the gatekeeper, the data goes straight to the page, and nothing is transmitted.

    Microphone and camera. Requested only when you press the button, never on page load. The stream is analysed in the page. The optional five-second recording on the microphone tester exists in memory and is gone when you close the tab. Pressing stop releases the device and its indicator light goes out.

    Keyboard, mouse, gamepad and MIDI. Key presses and controller input are read to show you what your hardware is sending. Nothing is logged, and nothing is kept after the page closes.

    The one thing that leaves

    Typefaces are requested from Google Fonts, which means your browser makes a request to a Google server. It carries no information about what you were doing on the site, but it is a third-party request and it is listed rather than left out. The about page shows every request this site makes, live, including that one.

    Nothing else is loaded from anywhere else: no scripts, no frames, no trackers, no CDN beyond the fonts.

    If this changes

    If advertising or analytics is ever added, this page gets rewritten before it goes live, with a consent notice where the law requires one. A privacy policy that quietly stops being true is worse than not having one.

    Questions

    Do you know how many people use the site?

    Not from the site itself. There is no analytics script, so there is no visit count, no session recording and no record of which tools are popular. Server access logs at the hosting level are the only trace, and they are not connected to anything here.

    Why does the site load fonts from Google?

    For the typefaces. It is a genuine third-party request and it is listed on the about page rather than glossed over. Self-hosting the fonts would remove it, and is worth doing.

    Is the contact form safe?

    There is no form submission. The contact page builds a message and hands it to your own email client, so nothing reaches this site at all — you can see the exact text before you send it.

    What happens when a tool asks for my microphone?

    Your browser asks you, and if you agree it passes the audio straight to the page. Nothing is recorded unless you press record, and that recording exists only in memory until you close the tab.

    Can I use the site with JavaScript disabled?

    The pages will load and the writing will be readable, but the tools themselves are JavaScript, so they will not run.

    Who do I ask about this?

    The contact page. Questions about what is stored are welcome and answered.