Security
This page describes how the website is built and hosted, and how the small amount of data it handles is protected. It states what is true today and claims nothing else.
Hosting and transport
The site is a statically generated Next.js application hosted on Vercel, served over TLS only, with HTTP Strict Transport Security enabled. Security headers restrict framing, content-type sniffing and referrer leakage.
Data handling
The website stores no customer data. Contact-form submissions are validated on the server, checked against a simple spam control, and forwarded by email; they are not stored in a database on this site. Secrets are held as environment variables and are never present in client-side code.
Sub-processors
- Vercel — hosting, build and edge delivery.
- Email delivery provider — forwarding of contact-form messages, when enabled.
Client engagements
Security arrangements for consulting engagements — access to analytics, search consoles, code repositories and data — are agreed in writing per engagement, with least-privilege access and revocation at the end.
Reporting a concern
If you believe you have found a security issue with this website, email hello@lucidens.com. We acknowledge reports promptly and do not pursue good-faith researchers.
This page is a draft awaiting legal review. It describes how the website works today and makes no claims beyond that.