Security

An identical answer may be stored, for your seat only, so the same request can be served again. That store is not a training set. To keep an answer out of it, send no_store.

Keys are stored as hashes. A seat that has been suspended is refused.

Patent notice: network request handling apparatus, UK patent pending GB2620045.1. Pending, not granted. This notice is not a claim of certification, legal compliance or product performance.

A fetch only runs for a reason you state. The site's own rules are read first. The address is checked so it cannot point at a private network. Personal details are screened before anything leaves.

Who else touches it

The labs you turn on. Amazon Web Services in London (eu-west-2), where the pipe runs. The receipt signature is made on a machine the company holds, not on AWS. Stripe, for billing. Resend, for mail from the contact and support forms. Base44, for this website.

Where the signing key lives

Since hour 20261019T07Z every receipt is signed off AWS, on a machine the company holds. The cloud that runs the pipe does not hold the signing key.

Retired keys stay published, so old receipts stay checkable: the genesis receipt still verifies against its retired key, shown on Receipts.

Names you will see on the response

The names we ask for begin X-Metrecept-. A few older names remain, because existing clients already send them. They are listed here so you can read a response without guessing.

| What you see | What it means | | --- | --- | | X-AT-Cache | The request was served again, sent to the lab, or not stored | | X-AT-Cache-Purpose | Stored so this same request can be served again | | X-AT-Region | Where it was served | | x-at-plane | rust when the front of the pipe answered | | X-Metrecept-Path | A label you set, echoed back | | X-Metrecept-Cost-Center | Where you want the charge attributed | | X-Metrecept-Spend-Cap | A notice that a call to the lab was allowed under a cap you set | | X-Metrecept-Receipt | The signed record, Ed25519, when the request was served again and when it was sent to the lab |

The privacy policy is the binding text. This page does not add a promise the policy does not make. Changes to the infrastructure are dated in the changelog.