Datacenter Atlas
Contact
Project

Security & privacy

Datacenter Atlas is a static, read-mostly research site. It runs no advertising, loads Google analytics only with your consent, self-hosts its fonts, and keeps the underlying dataset off the public web. The points below describe what is and isn't collected.

how this site handles security & data
HTTPS enforced
All traffic is served over HTTPS with HSTS; HTTP is upgraded.
Consent-first analytics
Google Analytics (via Tag Manager) stays off until you accept the banner; a cookieless GoatCounter page counter runs first-party. No ads. Fonts are self-hosted.
Strict browser policy
A Content-Security-Policy plus X-Frame-Options, nosniff, referrer and cross-origin policies are set.
Source links validated
External links are restricted to http(s) and opened with noopener/noreferrer.
Data isn't bulk-exported
The dataset stays server-side; the map is clustered server-side and detail is served one asset at a time. Only a fixed, curated sample is downloadable.
Responsible disclosure
Report security issues via /.well-known/security.txt.
The contact form
  • Only the name, e-mail and message you submit are sent, straight to the maintainer.
  • No account is created; the form itself sets no cookies and its content is never sent to analytics.
  • Submissions are protected by a honeypot, timing check and rate limiting; no data is shared with third parties.

Found a vulnerability? Please use the contact in /.well-known/security.txt for responsible disclosure.