What this site does, and what it does not do.

How this site is built

• No tracking

  This site sets no cookies and loads no analytics, advertising or tracking scripts. There is no third-party JavaScript on any page, and no embedded player that watches you.

• Nothing published before it is ready

  Methods, resources, courses and products each carry a publication state in the repository. Only records marked published are rendered, linked or listed in the sitemap. Everything else is unreachable from the public site, not merely hidden from navigation.

• Enquiries go to a mailbox, not a database

  The contact form validates on the server and sends a plain-text email. Nothing you submit is stored in a database, rendered as HTML, or published anywhere on this site.

• Your content is treated as text

  Submitted content is never interpreted as markup or as email headers. Line breaks are stripped from anything that becomes a header, and the message body is encoded rather than inserted raw.

• Errors say little

  When something fails, the site returns a general message. Server configuration, addresses and internal detail are not exposed through error text.

What we do not claim

This site has not been independently audited or penetration tested, and we hold no security certification. We are not going to describe ourselves as compliant with a regulation on the strength of a website. What is written on this page is what the code does, and it can be checked.

Products

No NoviThea product is published yet. When one is, its own privacy notice, terms and support information will be published with it and linked from its product page. Those documents will govern that product; this page covers the website.

Reporting a problem

If you find a security or privacy problem with this website, tell us through the contact form and describe what you found. Please give us a reasonable period to fix it before publishing anything about it.