onsecret.
fingerprint.onion

Transparency

Transparency

This page states plainly what data we collect, what we do not, and how the site is served. We aim to hold only what we are legally required to keep, and for no longer.

What this page just did

Response headers we sent you

These are fixed, server-owned values — not read back from your request. Verify them yourself:

content-security-policy
default-src 'self'; base-uri 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; connect-src 'self'; frame-ancestors 'none'; form-action 'self'; object-src 'none'no third-party script, style, font or connection — everything comes from our own origin
referrer-policy
no-referrerno third party learns where you came from, nor your order token
x-content-type-options
nosniffno content-type sniffing
frame-ancestors
'none'the page cannot be framed (clickjacking defence)

Verify independently

curl -sI https://onsecret.net/en | grep -iE 'content-security|referrer|x-content|onion-location'

No cookies are set on this page unless you have a cart. No analytics, no third-party requests.

What we do not collect

  • No IP address logs of site visitors.
  • No analytics, no third-party trackers, no advertising scripts.
  • No external fonts or CDNs: the site loads only from its own origin.

What we do collect, and how it is handled

  • A shipping address is necessary to deliver hardware. It is encrypted at rest and decrypted only to print a label.
  • An email address is optional. If you give one, it is used to send a tracking link, then purged.
  • Invoices are kept for the legally required retention period (French commercial code), then no longer.

How the site is served

  • Cloudflare is used for DNS only. In DNS-only mode it resolves the name; it does not proxy or see your traffic to the site.
  • Payment is in Monero. Monero transactions leave no public on-chain link between sender and receiver, so payments are not traceable on a public ledger the way transparent chains are.
  • A warrant canary is published and signed on a stated cadence.

The /empreinte correlation demo (opt-in)

  • The /empreinte page offers an explicit opt-in demo: it sends nothing unless you turn it on. The passive self-check stays computed in your browser and never leaves the page.
  • If you consent, the demo derives a coarse network prefix (IPv4 /24, IPv6 /64 — never your full IP) and salted hashes of a few hardware signals, kept at most 72h in an ephemeral memory-only store, isolated from the shop, then auto-deleted.
  • 'No visitor IP address logs' stays true for the site: no access log is kept. This consented demo is the sole exception, strictly bounded and erasable at any time.

Limits

  • Monero improves privacy; it is not a guarantee of anonymity, and your own operational choices still matter.
  • Carriers and the postal service necessarily see shipment metadata once a parcel is handed over.
  • We cannot speak for upstream infrastructure providers beyond what their own policies state.
Support