Privacy Policy — SYCOPHANCY.md

What we collect

We collect only standard web server logs through Cloudflare: your IP address, user agent, timestamp, and page visited. This is automatic, standard CDN practice for infrastructure and security.

Cloudflare's built-in analytics provide usage statistics only — no personal data tracking, no cookies, no analytics scripts beyond Cloudflare.

What we don't collect

We do not:

Collect personal data (names, emails, phone numbers)
Track you with cookies or fingerprinting
Run analytics platforms (Google Analytics, Mixpanel, etc.)
Track email opens or link clicks
Have forms that submit data to our servers
Run third-party scripts for advertising or tracking

Third parties

Cloudflare — our CDN and hosting provider. Read Cloudflare's privacy policy for details on what they collect.

Google Fonts — font delivery service. Font requests may log IP addresses. Read Google's privacy policy for details.

No advertising or external analytics platforms.

Contact

Questions about this privacy policy? Email [email protected].

Last updated

13 March 2026

Disclaimer: This specification is an open file convention published under the MIT licence, provided "as-is" without warranty of any kind, express or implied. It does not constitute legal, regulatory, compliance, financial, or professional advice in any jurisdiction. Use of this specification does not guarantee compliance with any law, regulation, directive, or standard — including but not limited to the EU Artificial Intelligence Act (Regulation (EU) 2024/1689), the Colorado Consumer Protections for Artificial Intelligence Act (SB 24-205), California AI transparency laws, or any other applicable national, state, federal, or international legislation. Organisations are solely responsible for determining their own regulatory obligations and should consult qualified legal and compliance professionals. The authors and domain holders accept no liability for any loss, damage, or regulatory consequence arising from the use or implementation of this specification. All domain names in the AI Agent Safety Stack are independently held assets and may be available for acquisition.