Privacy note
Short version: the pages are static, and the header check does not keep what you send. This note was last updated on 17 October 2026.
The HTML pages are static files. There is no account, no cookie banner, and no analytics script. Your browser asks for a page. The web server writes a standard access log: IP address, time, method, path, status, the request headers that arrived (including the user agent), the response headers this site sends, and the sizes. The log is used to see whether the site is up and to spot broken links. It is not sold or used to build a profile.
POST /v1/analyze takes the JSON you send. The process reads it in memory to build the response, then drops it. The body is not written to disk and is not copied into the access log. The JSON you get back can quote a checked header line, clipped at 180 characters. config_text is not returned. Path strings are not returned. The response says only whether config text was present, and how many paths were listed.
The rate limit keeps an IP address and a few timestamps in memory for about a minute. It does not keep the body. This server does not request any host named in the text.
https://dontdeployonfriday.com serves these pages and the header check over HTTPS. A request to that name on port 80 redirects there. The bare IP still answers on plain HTTP, and anyone on that path can read the body. Do not send secrets, cookies, tokens, or personal data on either URL. Leave Cookie, Authorization, and Set-Cookie out of the header block, and do not send those as request headers. The check does not need them. If a request header like that arrives, the access log can store it.
Nothing is for sale. No payments are accepted. If a payment is offered later, it will be Stripe Checkout or a Stripe Payment Link, on Stripe’s site, and this page will name a contact address before that switch is turned on. Card numbers will not be sent to this server and will not be stored here.
A contact address is not listed yet. Until one is printed on this page, do not send personal data, and do not expect a reply. The shop will not take payment before that address is here.
The sample is a note you copy. This server does not receive what you write on it. Do not put secrets in that note.