What it refuses
The things it
cannot do.
Not the things it chooses not to. Each of these is absent from the code rather than disabled in it.
Structurally impossible, not merely policy
Submit a form
No POST request is ever sent to any address we do not own.
Log in
No accounts, no credentials, no payment pages.
Touch a cart
Nothing added, nothing ordered, no checkout begun.
Probe for holes
No vulnerability scanning and no exploit of any kind.
Collect people
No personal data about your customers, ever.
The one exception, and its lock
Active checks, such as submitting a test message to find out whether your contact form genuinely delivers, are run only for paying clients who have signed a written authorization naming their own domain.
The code refuses to run them without that signature on file. The message is from us, never from anyone else.
This page loads nothing
No analytics, no tag manager, no pixel, no font from anyone else's server. Zero third-party requests, which you can check in your own developer tools.