Security & Trust

garthwilby.com is a small, hand-built website. Here is exactly how it is kept safe for visitors.

• Static, server-rendered pages

  Every public page is rendered from our own code at request time. There is no CMS, no plugins and no user-generated content, so there is nothing for third-party code to be injected into.

• Strict content security policy

  The site declares exactly which sources may load code, images and media: this domain, Google Fonts, YouTube embeds and our database. Everything else is blocked by the browser.

• No third-party ads or trackers

  We do not run advertising networks, retargeting pixels or third-party analytics scripts on this site.

• No payments processed on-site

  We never ask for card details here. Enquiries are simple contact forms protected against cross-site forgery.

• Encrypted connections only

  All traffic is served over HTTPS, and the site sends strict transport, frame and content-type headers on every response.