Privacy Policy

1. Overview

Fortrafied (“the Site”) is committed to protecting your privacy. This Privacy Policy explains how the Site handles information when you use our DLP testing and validation tools.

The most important thing to understand is that Fortrafied is a static website with no backend server, no database, and no server-side processing. All tools run entirely in your web browser.

2. Data We Do NOT Collect

Fortrafied does not collect or have access to:

• Any text, files, or data you enter into testing tools
• Classification results or scan outputs
• Regex patterns you test
• Email headers you analyze
• Files you hash or parse
• Personal information, account data, or credentials
• Form submissions or user input of any kind

All processing is performed by JavaScript running locally in your browser. There are no API calls to Fortrafied servers, no form submissions to external endpoints, and no telemetry or analytics payloads.

3. Client-Side Storage

Fortrafied uses browser localStorage for one purpose only:

• Custom Classifiers: If you create custom classifiers in the Classification Builder, they are saved to your browser's localStorage under the key fortrafied_custom_classifiers. This data never leaves your browser and is not accessible to Fortrafied or any third party.

You can clear this data at any time by clearing your browser's localStorage or using your browser's developer tools.

4. Hosting & Infrastructure

Fortrafied is hosted on GitHub Pages, a static site hosting service provided by GitHub, Inc. GitHub Pages may collect standard web server logs including IP addresses, browser type, and pages visited. This data collection is governed by GitHub's Privacy Statement.

Fortrafied itself does not add any additional tracking, analytics, cookies, or data collection mechanisms beyond what GitHub Pages provides as infrastructure.

5. Cookies

Fortrafied does not set any cookies. No first-party cookies, no third-party cookies, no tracking cookies, and no advertising cookies are used by this Site.

6. Third-Party Services

Fortrafied does not integrate with any third-party analytics, advertising, social media tracking, or data collection services. There are no embedded trackers, pixels, or beacons.

The only third-party service involved is GitHub Pages for hosting, as described in Section 4.

7. HTTP/HTTPS POST Tests

The HTTP POST and HTTPS POST testing tools send requests to a local API endpoint path (/api/dlp-test). These requests are intentionally designed to be intercepted by your DLP solution. Because Fortrafied is a static site with no backend, these requests will not reach any server — they exist solely to generate network traffic that your DLP can inspect.

8. Children's Privacy

Fortrafied is a professional security testing tool and is not directed at children under the age of 13. We do not knowingly collect any information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of the Site after any changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy, please reach out via the contact information on the About & Contact page.