Security & privacy

Trust comes from verifiable rules, not from promises.

Here is what we concretely do — for this website and for the product. What is not stated here, we do not claim.

This website

Little surface, no observation

No cookies, no tracking

No analytics scripts, no advertising pixels, no external fonts. There is nothing to consent to, because nothing is set.

Strict security headers

A Content-Security-Policy without third-party scripts, no embedding in other sites, no referrer leakage, HSTS.

Server-side validation

The Founder Beta request is validated and rate-limited on the server. The form works without JavaScript.

No account system

There is no login and no stored credential on this website.

Undernap

Authority, evidence, limits

Undernap is a local macOS app in the Founding Beta. These rules are part of the product, not of the marketing.

Local on your Mac

Project knowledge, missions and results live in a local data directory. There is no service of ours that your work runs through.

Your own AI accounts

Undernap uses the connections you make. We do not see your credentials; they leave your machine only towards the provider they belong to.

Nothing without an approved plan

A mission only starts once you have approved its plan. Read-only requests stay read-only.

Bounded outbound connections

A mission only talks to the providers its plan foresees. Your accounts’ capacity limits are respected, never circumvented.

Graded evidence

Observed, derived, inferred or unknown — every statement carries its kind.

Independent completion

Whether a mission is done is checked against the goal by a separate instance. “Done” is a verification result, not a self-report.

Offline licence, no server

The Founding Beta licence is checked on your device: signed, bound to your installation, with no licence server. Where an entitlement is missing, the app refuses the step instead of quietly allowing it.

Updates are manual and verified

There is no update server. An update is a new, verified package with a compatibility check and a rollback. The package is ad-hoc signed — not notarised, and we say so.

Your data

What we hold about you at all

Only what you enter

If you request Founder Beta access, we hold your email address and the time of your consent. Nothing else.

Double opt-in

The address only counts after the confirmation link is clicked. Without that click, nothing happens.

Deletable any time

The unsubscribe link is in every email. Unsubscribing removes your entry — no question asked, no waiting period.

Never shared for advertising

Your address is not sold, rented or used for third-party advertising.

Found something?

If you suspect a vulnerability in this website or in Undernap, write to us directly. We reply, confirm receipt, and say what we are doing.

aivanizki@googlemail.com · Contact