Trust
Security
This page describes the technical side of the site: what is protected, what cannot be, and what you can do on your side.
We do not write «your data is completely safe». In a field where someone's freedom is at stake, that phrase signals that they are not being spoken to seriously. Here is how it actually is.
The connection
The site runs over HTTPS only, with forced upgrading: an attempt to open it over an unencrypted protocol is redirected and remembered by the browser. This closes off passive interception of traffic between you and the site, but it does not hide the fact of the visit from your internet provider.
What the site sees and does not see
The site is static: pages are built in advance and no database is queried when you open them. It requires no registration, creates no accounts and stores no passwords — there are none. The only place where you transmit anything is the contact form.
The contact form
Two fields are required: how to address you and where to reply. A description of the situation is optional. We do not ask for documents, case numbers or scans at this stage and advise against sending them before a channel has been agreed. What you send reaches us as a Telegram message — stated plainly here and in the privacy policy.
Protection against abuse
The form is guarded by a hidden honeypot field and a rate limit: no more than five submissions from one address in ten minutes. The limit was added deliberately — without it any script could flood the enquiry channel with rubbish and disable it exactly when somebody needed to write.
Session recording is off
We use no session-recording tools. An instrument that captures mouse movement and typing into form fields has no place on a site about confidentiality, however convenient it is for analytics. Such a tool stood here until September 2026 and was deliberately switched off.
Statistics
Two counters: Google Analytics 4 with anonymised IP and Yandex Metrica without session recording. They collect pages, referrers and general device characteristics. You can switch them off on your side with «Do Not Track» or a blocker: the site works fully without them.
What we advise on your side
If the situation is sensitive, write from a device nobody else can access, and not from a work computer. Do not leave a contact someone else can read. The country and the gist are enough in a first message — details can always be discussed later, through a channel chosen together.
What we do not promise
Absolute security. It does not exist for any messenger or any website, and a promise of it is itself a reason for caution. We promise something else: to say plainly where the technical boundary runs, and to collect no more than necessary.
If you find a vulnerability
Write to any of the listed contacts. We will look into it and reply. Reporting a security problem will not lead to any claim against you.