Privacy notice

This site is a research decoy run by Mithos Limited (company no. 17459676). It contains fake data only and is not a real service.

We log each request: time, method, page path (no query string), response status, browser or tool family, a shortened network address (IPv4 /24 or IPv6 /48) and a pseudonym that changes weekly. We do not store your full IP address, cookies or request bodies.

Why: security research into how exposed web apps are found. Legal basis: legitimate interests. Retention: 90 days, then deleted. We do not sell or share individual-level data.

To object to this processing or ask us to delete data, email info@mithos.co.uk. You can also complain to the Information Commissioner's Office (ico.org.uk).