Privacy statement

Short version: this site stores nothing about you. Long version follows.

What this site collects

Nothing. sunvax.x1000.ai is a fully static website hosted on Cloudflare Pages. It does not:

• set cookies of any kind;
• run analytics (no Google Analytics, no Plausible, no Cloudflare Web Analytics);
• load third-party scripts (no fonts, no tag managers, no chat widgets);
• capture leads or contact form submissions on this domain;
• fingerprint your browser, store your IP address beyond the standard Cloudflare edge log (held by Cloudflare under their privacy policy), or link any of your activity to identity.

The four interactive modules

The kit selector, experiment designer, troubleshooter, and any other interactive UI on this site run entirely in your browser. Inputs are not sent to any server. Closing the tab discards everything you typed.

The "Copy diagnostic trace" button in the troubleshooter and the "Copy text trace" button in the experiment designer place text on your clipboard. We do not see what you copy.

Outbound links

Order and partnership buttons link to order.sunvaxmrna.com and sunvaxmrna.com/partner. Those are operated by SunVax mRNA Therapeutics, not by us. Their privacy practices are theirs to disclose. We send a referrer header at the level permitted by our Referrer-Policy setting (strict-origin-when-cross-origin) — they see that you came from sunvax.x1000.ai, not which specific page you were on.

What Cloudflare sees

The site is served from Cloudflare Pages. Cloudflare records standard edge access logs (request time, URL, IP, user agent) as part of operating their CDN. We do not access those logs for any analytical purpose. Their data handling is governed by Cloudflare's privacy policy.

Security headers

Every response on this site carries Content-Security-Policy (no external scripts allowed), X-Frame-Options DENY (we don't want to be framed), Referrer-Policy strict-origin-when-cross-origin, and Permissions-Policy denying camera / microphone / geolocation / payment / USB / FLoC (cohort tracking). See about for our methodology.

Children

This site is built for wet-lab scientists. It is not directed at children under 13, and we do not knowingly collect anything from anyone.

Changes to this statement

If we ever add a feature that collects data (e.g., a contact form), we will update this page before that feature ships. The site footer's "Last verified" date will change with it.

Contact

Questions about this statement: email [email protected]. Questions for SunVax: email [email protected].

Last updated: 2026-05-17.