Privacy without the mystery.

What the course stores in your browser

Auth Mechanics uses browser-local storage for functional preferences such as your color theme, Guided or Explore mode, completed lessons, the lesson you were viewing, and whether you have seen the course orientation. This information stays in your browser unless a browser feature or extension synchronizes it. The Auth Mechanics application does not send your saved course progress or theme preference to an application database.

You can remove this information at any time by clearing site data for authmechanics.dev in your browser. Clearing it resets local progress and preferences.

Accounts, credentials, and lesson simulations

Auth Mechanics does not require a user account. The protocol examples are simulations. The lessons are not intended to collect real passwords, access tokens, private keys, identity documents, or other production credentials. Do not paste real secrets into examples or browser developer tools while using the site.

Cloudflare hosting and security

Auth Mechanics is delivered through Cloudflare. Like other web infrastructure providers, Cloudflare may process ordinary network and request information needed to deliver and protect the site, such as Internet Protocol (IP) addresses, request headers, requested URLs, timestamps, and security signals. Depending on the Cloudflare features in use, Cloudflare may also use cookies that it classifies as strictly necessary for network or security functions.

Cloudflare's handling of information is governed by its own policies. See Cloudflare's Privacy Policy and Cloudflare's cookie documentation.

Cloudflare Web Analytics

Auth Mechanics may use Cloudflare Web Analytics to understand aggregate page traffic and site performance. Cloudflare describes Web Analytics as privacy-first and cookie-free, and states that it does not collect or use visitors' personal data or track individual visitors across Cloudflare customers' sites. When enabled, a Cloudflare performance beacon may load in the browser and report page-view and performance measurements.

This analytics service is used to understand which pages are useful and whether the site performs well, not to build advertising profiles.

Google Search Console

Auth Mechanics may use Google Search Console to understand how the site appears in Google Search, including search queries, impressions, clicks, indexing status, and technical search issues. Search Console is a site-owner tool; it does not require Auth Mechanics to add a Google Analytics tracking tag to lesson pages.

Google may independently crawl public pages as part of operating Google Search. Google's handling of information is governed by Google's Privacy Policy.

Google Analytics and advertising technology

Auth Mechanics does not currently use Google Analytics, Google Ads, remarketing pixels, advertising cookies, or cross-site advertising trackers. If the site later adds Google Analytics or another non-essential analytics or advertising technology, this notice will be updated and appropriate consent controls will be added where required before those tags are allowed to run.

Contact messages

The public contact address is contact@authmechanics.dev.

If you send a message to a public Auth Mechanics contact address, the message may include your email address, name, message content, and normal email delivery information. That information is used to read and respond to the message and may be processed by the email routing and mailbox providers involved in delivery. Contact messages are not sold or used for targeted advertising.

What Auth Mechanics does not do

• No user-account database.
• No sale of personal information.
• No targeted advertising.
• No cross-site behavioral profiling by Auth Mechanics.
• No collection of real authentication credentials as part of the lessons.

External links

Lessons link to standards, documentation, and other external resources. Once you follow an external link, that site's privacy practices apply. Auth Mechanics does not control those third-party sites.

Changes to this notice

This notice may change as Auth Mechanics adds features or services. Material changes will be reflected on this page with a new “Last updated” date. The site will not silently add non-essential tracking and rely on this page alone where consent is legally required.