What I don't know

Honestly, at the end of the volume

That's how much I know without your help. But there are things I can't see from you just walking in.

Your name

unless the link was made for you alone

Your e-mail and phone number

operators no longer add your number to the traffic

Your exact address

an IP address gives the neighbourhood, not the street

Your browsing history

browsers have locked that away

Files, contacts, clipboard, other tabs

a page has no access to them

Your real time zone, graphics card, processor

only JavaScript would give me those

I keep nothing about you for longer than 15 minutes. Then it all disappears.
I didn't set a single cookie.
I didn't run a single line of JavaScript on your device.
Server logs never contain your address or your token.

Back to page 1

The proof

Every response carries this header:

Content-Security-Policy: script-src 'none'; base-uri 'none'; form-action 'none'

script-src 'none' forbids all scripts, so your browser could not run one on these pages even if I tried.

What happens to the data

Controller

watchout.click [contact e-mail: to be provided]

Purpose

Showing you, as education, what a web server learns from a visit.

Data

Your IP address and request headers (kept for the retention period below), and the results of the checks you opened.

Recipients

On page 2 some data goes to third-party services:

rdap.org: receives your IP address to look up who holds it.
Open-Meteo: receives coordinates rounded to city scale, never your address.

Retention

A page token, the headers of your first request (such as Referer), probe hits and lookup results are kept for 15 minutes, then they expire on their own.

Geolocation data: IP Geolocation by DB-IP (CC BY 4.0). Weather data: Open-Meteo.com. Fonts: Patrick Hand and Patrick Hand SC (SIL Open Font License), served from this site.