Privacy Policy
Short version: no ads, no tracking cookies, and nothing is sold or shared.
Who I am
This is the personal website of Dalton Sweet, at https://daltonsweet.com.
What this site collects
The site sets no tracking or advertising cookies. Your browser's session storage remembers that you have already seen the intro animation during this visit.
The site is served by Cloudflare, which processes standard request data (such as IP address and user agent) to deliver pages and protect the site from abuse. See Cloudflare's privacy policy.
Live features
While you have the site open, your browser keeps a live connection so you can see other people exploring at the same time. Other visitors can see your approximate region and country (for example "Oklahoma, US"), a location rounded to roughly 100 km for the planet, which page you are on, your cursor position on that page, and actions such as waves or attack simulations. None of this is stored: it exists only while your tab is open.
The "your link" readout shows your own connection details (nearest Cloudflare data center, approximate city, network provider and round-trip time). Those are sent only back to you and are not stored.
Your explorer-log discoveries and the sound setting are saved in your browser's local storage. While you're connected, a new discovery is announced in the live activity feed (as with the actions above), but it isn't stored anywhere.
The Lab
A few Lab features keep a small amount of data so they work across visits: the star you place in the shared sky (its position, color and your approximate region), your best Packet Defense score (with your approximate region as the player name), and whether you sent a "signal" on a page. These are tied to a random token generated by your browser and stored only as a one-way hash. No names, emails or IP addresses are kept. Clearing your browser storage disconnects you from them.
The email security checker and DNS propagation watch look up public DNS records for the name you type, through Cloudflare, Google and Quad9's public resolvers. The security headers scanner fetches the public website you enter from Cloudflare's network. Names and URLs you check are not stored.
The email header analyzer, script generators and Password Lab run entirely in your browser: pasted headers, form values and passwords are never sent anywhere. The breach check sends only the first five characters of your password's SHA-1 hash to Have I Been Pwned (k-anonymity), never the password itself.
Live sky and threat feed
The site's sky follows the real time of day and weather in Tulsa. The weather comes from Open-Meteo and the threat ticker from CISA's public Known Exploited Vulnerabilities catalog; both are fetched by this site's server and cached, so your browser never contacts them and nothing about you is sent.
Lite mode, Ops mode and the companion satellite remember your choice in your browser's storage only.
Contact form
If you send a message through the contact form, your name, email address, subject and message are emailed to me so I can reply. They are not added to any mailing list, and I will delete them on request.
Embedded content and links
Pages may link to other websites such as LinkedIn. Those sites have their own privacy practices once you visit them.
Your rights
To ask what I hold about you, or to have it deleted, use the contact page.