Skip to main content
EN | FR
Request a Dataset

Security

A static, minimal, privacy-first website with a reduced attack surface.

Static Website Architecture

This website is built using static HTML, CSS, and JavaScript.

There is:

  • No server-side application serving website content
  • No database used to generate public website content
  • No user account system
  • No session management
  • No dynamic page generation for public website content

This greatly reduces the attack surface compared to traditional web applications.

No User Accounts

This website does not support:

  • User registration
  • User login
  • Password management
  • User sessions

Because no account system exists, there are no user credentials stored by the website.

Minimal Data Collection

This website does not collect data during normal browsing.

Dataset requests are submitted through a first-party form that posts to a private API endpoint operated by MyWaypoint. If the API is unreachable, the form falls back to opening your local email client.

No request data is stored by this website. Submitted data is received and processed by our own backend infrastructure.

No Third-Party Tracking or Analytics

This website does not load:

  • Analytics platforms
  • Advertising scripts
  • Social media widgets
  • Tracking pixels
  • Third-party JavaScript libraries

Reducing external dependencies helps reduce security and privacy risks.

Responsible Operations

Dataset requests are reviewed manually.

Projects are evaluated for feasibility, available sources, and legal considerations before work begins.

We communicate clearly about what can and cannot be delivered.

Reporting a Concern

If you believe you have identified a security issue, please contact: richard@mywaypoint.ca

Static HTML Site
The public website is delivered primarily as pre-built HTML, CSS, and JavaScript files, minimizing complexity and attack surface.
Minimal Backend
A lightweight first-party API is used only for dataset request submissions. No public user accounts, content management system, or dynamic website functionality exists.
No User Accounts
No registration, no login, no passwords, no session tokens to protect.
No Third-Party Scripts
No external JavaScript is loaded on page load. Avoiding third-party tracking and marketing scripts helps reduce security and privacy risks.
Minimal Data Collection
No data collected on page load. Requests are submitted to a first-party API endpoint, not stored by this website.
First-Party Form Submission
Dataset requests are submitted to infrastructure operated by MyWaypoint. No third-party form providers are used.