Skip to content
SecArsenal
Educational and ethical use only. Only test systems you own or are explicitly authorized to test. Full disclaimer.

Privacy Policy

Last updated September 2026.

No accounts, no tracking, no analytics

SecArsenal is a static site with no backend, no user accounts, no cookies, and no analytics or advertising trackers of any kind. We don't know who you are, and we have no way to identify you across visits or devices.

What's stored in your browser

The site writes exactly three entries to your browser's ownlocalStorage, never to a server, and never anywhere we can see them:

  • sa_disclaimer_ack_v1— remembers that you dismissed the first-visit notice, so it isn't shown again.
  • sa_category_visits— a running count of which tool categories you've viewed, used only to reorder the homepage's "top categories" widget toward what you actually browse.
  • sa_a11y_prefs_v1— which accessibility panel toggles you've turned on (larger text, extra spacing, high contrast, and similar), so they stay applied on your next visit.

All three are readable and erasable like any other site data in your browser's settings, and clearing them just resets the site to its default, unpersonalized state. See the disclaimer for how the first entry is used, and SECURITY.md for the technical detail.

Third-party links

Every tool and OS page links out to that project's own official site. Those are independent, third-party destinations with their own privacy practices — this policy covers only SecArsenal itself.

Hosting

SecArsenal is served as static files. Whatever infrastructure hosts it may keep standard web server access logs (IP address, requested URL, timestamp) for operational and security purposes — that's true of essentially any web host and isn't something this site adds on top of. We don't use those logs for tracking, and we don't combine them with any other data.

Questions

Open an issue on the GitHub repository, or see SECURITY.md for how to report a security or privacy concern privately.