What this website can see

Cloudflare, in front of this site

Taushet.com is delivered through Cloudflare, which acts as a reverse proxy in front of our web server. Because Cloudflare handles incoming connections, it can see visitors’ IP addresses and requests under its own policies.

Cloudflare may retain information about traffic passing through its network according to its own policies. Those records are separate from Taushet’s web server and are outside the server-side logging controls described below. Cloudflare’s own policy is at cloudflare.com/privacypolicy.

This site

The site itself is deliberately minimal. It uses no tracking cookies, analytics, advertising scripts, session replay, or third-party page assets. Our web server does not keep access logs, and request details are excluded from its error logs.

What the web server counts

This site's own server writes no access log: no file or journal on it records the requests it serves. It does count them. For each request, the web server hands a small counter on the same server a short record: the requested path, with its query string removed, and the User-Agent. The connecting address, cookies, passwords and the common identifying and location headers are removed before the record leaves the web server; a header the web server's filter doesn't know about would still be in it. The counter reads only the path and the User-Agent, adds one to a fixed category's total for the current UTC day (a robots.txt-disallowed path, a probe for software this site doesn't run, a declared crawler name, "browser-like", and so on), and drops the record. The counter never writes the record to disk or to any log. If the counter's receiving socket is shut down, the web server may print some records on its own error output instead; the server's system journal is set to discard those lines as they arrive, so they are not stored and not passed on to any other log. Requests with unusually large headers are refused before anything about them is recorded. What is kept is only those daily totals.

The daily totals (requests per category per UTC day, with no address, path, User-Agent or time of any request) are kept indefinitely. Until public release they are shown only on a private preview of the full Taushet website, not on this site.

The Privacy status panel and the cookie note

The Privacy status panel at the bottom of every page runs locally in your browser. It counts the cookies the page can see, the files your browser reports loading from other sites, and what this site has stored locally, and displays the result to you. That information is not sent back to Taushet. The only local value we currently store is a preference remembering that you dismissed the cookie notice.

The panel only shows what your browser reports to the page. A page's script can't see cookies marked HttpOnly, and a browser may leave some requests out of what it reports, such as one made by a browser extension. Without JavaScript, neither the panel nor the cookie note appears, and nothing is stored.

If you email us

A message to one of the addresses on the Contact page reaches us like any email: with your address, what you wrote and the message's headers. Our email is hosted by Proton. We use your message to answer it.

What this page covers

This website only. The Taushet VPN service is not publicly available, and nothing on this site connects to it.