# Data Protection Overview

> The site does not maintain accounts, login, or persistent user data storage.

Page: Info
Canonical: https://banes-lab.com/info#data-protection

The site does not maintain accounts, login, or persistent user data storage. Your visit involves only the transport of public page content from my server to your browser, protected end-to-end by TLS.

### What I Do Not Collect

**Accounts**

No registration, login, or user accounts of any kind

**Authentication**

No passwords, sessions, or credential storage

**Personal Data**

No names, emails, payment info, or profile data stored server-side

**Tracking**

No analytics scripts, ad networks, or third-party trackers

**Cookies**

No application cookies are set during normal browsing

Without a user data store there is no database for an attacker to compromise. The threat model is intentionally minimal.

### Encryption in Transit

All content is delivered over HTTPS with these transport settings:

**TLS Versions**

TLS 1.2 and TLS 1.3 only (older, vulnerable protocols disabled)

**Perfect Forward Secrecy**

Enabled, so recorded sessions cannot be decrypted with a long-term key exposed later

**HTTP/2**

Enabled

**Certificate Authority**

Let's Encrypt with automatic renewal

**HSTS**

HTTP Strict Transport Security with 1-year duration, includeSubDomains, and preload directives

#### Cipher Suites

- ECDHE-ECDSA-AES128-GCM-SHA256
- ECDHE-RSA-AES128-GCM-SHA256
- ECDHE-ECDSA-AES256-GCM-SHA384
- ECDHE-RSA-AES256-GCM-SHA384
- ECDHE-ECDSA-CHACHA20-POLY1305
- ECDHE-RSA-CHACHA20-POLY1305