Security

The site is available only over an encrypted connection (HTTPS). This security notice describes only verifiable, public technical facts; we do not publish confidential protection details.

• On the server's instruction, the browser opens the site and its subdomains only over an encrypted connection for one year (HSTS).
• A content security policy (CSP) restricts where the site may load scripts, style sheets, images and fonts from.
• Other websites cannot embed the site in a frame.
• Use of the camera, microphone, geolocation and payment interface is disabled.
• The site serves its fonts itself.
• The only script loaded from an external provider is the Cloudflare Web Analytics visitor statistics script; no other script, image, style sheet or font is loaded externally.
• The site uses no advertising tracking code. Visitor statistics are aggregated; according to Cloudflare, they use no cookies and do not identify visitors.
• Admin login is by invitation and has two steps: every login requires a second verification, currently a code sent by e-mail.

Measurement date: 2026-10-11