This policy explains how AIOD — a trading name of MAXFR LTD — handles information when you visit aiod.co.uk. It is written to be read, not to be survived. In short: we do not run advertising, analytics pixels or profiling, and the only cookies that may appear are strictly essential ones set by our security and delivery provider.
1. Who we are
This website is operated by MAXFR LTD, a company registered in England and Wales (Company No. 1455659), trading as AIOD. For any privacy question, or to exercise any of the rights below, contact us at deploy@aiod.app. MAXFR LTD is the data controller for this website.
2. The short version
- We do not collect personal data for accounts, analytics, advertising or profiling. Like any website, essential hosting and security systems may process short-lived technical logs.
- We run no advertising trackers and no third-party analytics pixels — no Google Analytics, no ad tags, no profiling scripts.
- We set no non-essential cookies. The only cookies that may appear are strictly essential ones set by our security/delivery provider (Cloudflare) — see “Cookies we may set” below.
- The interactive tools on this site compute entirely in your browser; the figures you enter are never transmitted to us.
- The only other third parties involved are our font provider and an optional social embed you must click to load.
3. Cookies
A cookie is a small file a website can store in your browser. AIOD sets no cookies of its own, and no advertising or analytics cookies of any kind. We do not use cookies to track you, and we run no cookie-based analytics. Because we set no non-essential cookies, you are not shown a cookie-consent banner — under UK law, strictly necessary cookies do not require consent.
A small number of strictly essential cookies may nonetheless be set by our security and delivery provider to keep the site available and protected. These are not used for advertising or cross-site tracking.
Cookies we may set
In plain English, the only cookie you are likely to encounter is:
| Cookie | Set by | Purpose | Type / life |
|---|---|---|---|
__cf_bm | Cloudflare | Bot-management / security — distinguishes humans from automated traffic to protect the site. Not used for advertising or to track individuals across sites. | Strictly essential · ~30 minutes |
Depending on Cloudflare’s security configuration, other strictly necessary Cloudflare cookies could occasionally appear for the same security purpose. None are advertising or analytics cookies. Cloudflare’s own cookie information is published on their website.
One further, entirely optional case: if you click to load the Instagram archive on our Origins page, Instagram (Meta) may then set its own cookies under its own policy. Nothing loads, and no such cookie is set, unless you choose to load it.
4. What little we collect
Server logs and aggregate analytics
Our site is served through Cloudflare. Like any website, essential hosting and security systems process the technical information your browser sends with each request — such as IP address, browser type, the page requested and a timestamp — in short-lived technical logs used to deliver the site, keep it secure, and produce aggregate traffic statistics (visit counts, popular pages, broad country-level location). We use these only to keep the site running and to understand roughly how many people visit and what they read — never to build a profile of you, and never for advertising. Depending on configuration this aggregate reporting may be gathered server-side and/or via Cloudflare’s privacy-focused, cookieless analytics; either way it does not use advertising cookies and does not track you across other websites.
A note in good faith: under UK GDPR an IP address can, in some contexts, count as personal data. Where that is the case, our lawful basis is our legitimate interest in keeping the site secure and available, and such data lives only in short-lived technical logs held by our provider. We do not link it to your identity or use it to profile you.
Information you send us
If you email us — including via the "email my results" buttons on our tools, which simply open a pre-filled message in your own email app — we receive whatever you choose to send: your email address, your message, and any figures you include. We use this solely to respond to you and discuss a potential deployment. The tools themselves do not send us anything; the email is composed and sent by you, from your own account.
5. Why we are allowed to handle it (lawful bases)
Under the UK GDPR, we rely on:
- Legitimate interests — for secure delivery of the website, essential security, and basic aggregate statistics held in short-lived technical logs; these are necessary to run a website at all and have minimal privacy impact.
- Consent — for loading the optional Instagram embed, which only happens if you click to load it.
- Taking steps at your request — when you email us about our services, we process your message to reply.
6. Third parties
We keep these to the minimum a modern website needs, and name them plainly:
| Provider | Purpose | Notes |
|---|---|---|
| Cloudflare | Hosting, security & delivery | Essential delivery/security; may set the strictly necessary __cf_bm cookie; privacy-focused cookieless analytics only — no ad tracking |
| Google Fonts | Typefaces (Chakra Petch, IBM Plex) | Serves font files; your browser requests them on page load |
| Instagram (Meta) | Optional archive embed on Origins | Loads only if you click; then sets its own cookies under Meta's policy |
| Your email provider | Sending us a message | Only if you choose to email us |
We do not sell or share your information, and we do not use it for advertising. We have no advertising on this site.
7. The interactive tools
Our calculators and diagnostics — hardware sizing, cost comparison, exposure and resilience scoring — run entirely in your browser using JavaScript. Nothing you enter is sent to us or stored on a server. If you use an "email my results" button, your browser builds a message from those figures and hands it to your own email app; sending it is your choice. (Fittingly, the tools practise what the product preaches: the data stays with you.)
8. How long we keep things
Server logs and aggregate statistics are retained by our host for a limited period under their standard practice and are not kept by us beyond that. Emails you send us are kept only as long as needed to deal with your enquiry and any resulting relationship, after which they are deleted.
9. Your rights
Under the UK GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, and to data portability. Because we deliberately collect so little — and nothing that identifies you from browsing alone — there is often little to act on, but we will always help. To exercise any right, email deploy@aiod.app.
You also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk — though we'd appreciate the chance to put things right first.
10. External links
This site links to other websites — including our sister brands and WarGameLLM, and our parent MAXFR LTD. Once you follow a link off aiod.co.uk, this policy no longer applies; please consult the privacy policy of the site you visit.
11. Changes to this policy
If we change how this site handles data — for example, if we ever introduce a feature that requires cookies — we will update this page and its "last updated" date first. If a change ever required your consent, we would ask for it before the change took effect.
No ads, no third-party trackers, no non-essential cookies, and no profiling — only the essential security and delivery a website genuinely needs, and one optional embed that waits for your click. A company that sells air gaps should run a website you can trust on sight.