Plain English

Privacy

What this site measures, what it doesn't collect, and how the assessment's own data handling differs.

What this site measures

This site runs Google Analytics 4, and nothing else, to learn which writing helps visitors. GA4 sets cookies under Google's rules, and its reports are aggregated. This site does not configure user identifiers and does not try to identify individual visitors.

What it doesn't do

• No advertising, no ad cookies, no data sale, no data brokerage.
• No forms. Contact happens by email, so nothing you write passes through this site.
• No mailing list. There is nothing to unsubscribe from.

The assessment itself

The baseline assessment reads your repositories through a token you scope and revoke, under a mutual NDA. That work is governed by that agreement, not by this page. The site's own promise stands: the practice never reads or stores secret values from your vaults.

Email correspondence

If you email the practice, the message is kept as part of the business record, and replies come from a practice address. Addresses aren't shared, and correspondence isn't added to any list.

Who is responsible

Unrotated Security is the practice of Harvey Ramer. Questions about anything on this page go to [email protected].