Skip to content
EzTechTonic

// security

Trust and security

Plain statements about how this website is built, and how to tell us about a problem.

This website

What we do

  • Encrypted connection

    The site is served over HTTPS, and browsers are told to use HTTPS only (HSTS).

  • Strict content security policy

    Every page carries a content security policy with a fresh nonce per request, so only scripts we approve can run.

  • Protected against framing

    Other sites cannot embed ours in a frame, which blocks click-jacking.

  • Limited browser features

    The site switches off camera, microphone, location and payment access in the browser.

  • Checked forms

    Our forms are checked on the server, limited per visitor, and guarded against automated spam. Server keys never reach the browser.

  • No accounts here

    This site has no sign-in, so there are no passwords to lose on it.

  • Measurement

    The site can load Google Tag Manager to measure how it is used. The privacy policy explains what it covers.

Responsible disclosure

Report a security issue

If you think you found a security problem on our website or in our products, please write to us. Tell us what you found and how to see it. Please do not access other people’s data, and give us a reasonable time to fix it before you share it.

E-mail: support (at) eztechtonic.com

Our contact details for security reports are also published at /.well-known/security.txt.