Content Security Policy
Restricts scripts, styles, images, frames, forms, and network connections to local site assets.
Minimal-data design
Privacy notice
The provided site build has no user accounts, database, contact form, analytics platform, advertising network, or server-side storage of personal support-plan content.
Site data
What the provided application does not collect
- No name, email, phone, diagnosis, or personal story is submitted to the site.
- No support-plan form is posted to a server.
- No account or login is created.
- No analytics, ad, social-media, or fingerprinting script is included.
- No cookies are set by the application code.
Hosting logs may still exist
A web host or content-delivery service may automatically log IP addresses, timestamps, requested pages, user agents, errors, or security events. Those records are controlled by the hosting provider and server configuration, not by this PHP application.
Browser local storage
Three optional features save data on the current device
| Feature | Storage key | What is stored |
|---|---|---|
| Theme | ep-theme | Light or dark preference. |
| Saved links | ep-bookmarks-v1 | IDs of bookmarked resources. |
| Support plan | ep-support-plan-v1 | Text entered into the local worksheet. |
Local storage is not automatically transmitted to EspionagePsychosis.com. It is also not encrypted by the application. Other people with access to the same device or browser profile may be able to view it.
External services
Links open websites with their own privacy practices
The resource directory links to government agencies, health systems, research databases, charities, crisis services, treatment locators, and safety organizations. When you open one, that organization may receive ordinary web-request information and may use cookies, analytics, chat systems, or forms under its own policy.
Some crisis services offer phone, text, or online chat. Review their confidentiality and emergency-intervention information when possible, especially if privacy is a major concern.
Safer use on a shared device
- Use a separate browser profile when appropriate.
- Print or download a support plan, then clear the local copy.
- Do not save highly sensitive passwords or evidence in the worksheet.
- For domestic abuse or coercive control, seek technology-safety advice before changing device settings.
Application security
Built-in defensive settings
Clickjacking protection
Response headers prevent the site from being embedded in another page’s frame.
Limited browser permissions
Camera, microphone, geolocation, payment, and USB access are disabled through policy headers.
No remote JavaScript dependencies
The build does not load third-party frameworks, fonts, trackers, or content-delivery scripts.
Escaped dynamic output
PHP output from the local resource file is HTML-escaped before rendering.
No upload endpoint
The application contains no file-upload, email, comment, or evidence-submission feature.