This site is a research decoy run by Mithos Limited (company no. 17459676). It contains fake data only and is not a real service.
We log each request: time, method, page path (no query string), response status, browser or tool family, a shortened network address (IPv4 /24 or IPv6 /48), a pseudonym that changes weekly and your full IP address. The full address is kept for 90 days in a restricted store that only named administrators can read, then deleted. We store no cookies or request bodies. This decoy runs in one of London, Frankfurt, Virginia (USA), Singapore or Sydney.
Why: security research into how exposed web apps are found. Legal basis: legitimate interests. Retention: 90 days, then deleted. We do not sell or publish individual-level data. A researcher may look up a visitor's address at Shodan InternetDB (Shodan, USA) to see what is known about the machine at that address; each lookup is recorded and nothing is looked up automatically. A researcher may also be shown a suggestion from an AI model (Anthropic, USA) made from a short summary we worked out ourselves (the kind of client and the kinds of page asked for, never your address, network, pseudonym or anything you sent); a person decides every suggestion.
To object to this processing or ask us to delete data, email info@mithos.co.uk. You can also complain to the Information Commissioner's Office (ico.org.uk).