The public site keeps a small boundary.

Public pages

What runs when you visit.

The public Sekos marketing pages load site-owned HTML, styles, scripts, fonts, icons, and research assets. They do not load third-party analytics or advertising scripts. There is no contact form.

Each page makes a same-origin request to /oauth2/auth to decide whether to display Log in or Log out. If you have signed in to an authenticated Sekos service, your browser sends the essential session cookies for that same-origin check.

Browser-local state

Preferences and notes remain in your browser.

The site uses local storage to remember the selected visual philosophy, receipt style, locally created UX notes, whether the UX-notes control is shown, and the research display theme. UX notes remain in your browser unless you explicitly copy or download them.

You can remove this state with your browser’s site-data controls. Removing it resets the preferences and locally saved notes; it does not revoke an authenticated session or an externally issued authority artifact.

Request metadata

Serving a request exposes operational metadata.

As with any web service, the hosting and security infrastructure necessarily processes request metadata such as the requested path, time, IP address, and user agent. This page does not promise a specific retention period for operational logs.

Authentication, demos, the governance console, and other product surfaces can process additional data under their own visible workflow and authority boundary.

Email and external sites

You choose what leaves this site.

Contacting Sekos by email sends the information you choose through your email provider and the Sekos mail provider. Following links to GitHub, Substack, Hugging Face, ChatGPT, or another external site subjects that visit to the destination’s policies.